Warning Security report .... Résolu

Question

Bonjour,

Comme pas mal de gens à ce que j'ai pu constater en googelisant le truc, j'ai attrappé une sâleté qui se manifeste en changeant mon papier peint, il me colle un ecran noir avec un WARNING qui clignotte et un lien de pub me disant que mon pc est infecté de multiples virus..... haha.... et il y a aussi une icône rouge à croix blanche dans le tray, qui me poppe une info bulle toutes les 5 minutes " Warning, security report,  your computer is infected, bla bla, " et si je clique droit dessus, ca ouvre une page internet pour essayer de me vendre un anti!virus.
Ah oui, il est aussi impossible de modifier le papier peint via les propriétés de l'affichage...

C'est arrivé quand j'ai éxecuté un .exe téléchargé, pourtant j'ai bien dit à Antivir de supprimer le fichier, mais apparemment ca n'a pas suffi.


Que faire ? que faire?

J'ai executé Spybot, et supprimé pas mal de choses du coup, mais ca n'a pas arrangé le problème.
J'ai executé SmitfraudFix, en normal, sans succes, puis en sans echec, idem, il arrête le machin, mais ca revient au bout de quelques minutes.

Aidez moi, je vou en prie, en plus je passe pour un con au boulot du coup..
Merci d'avance,  je paye une bière si vous n'êtes pas loin.

Alex

^^Marie^^ · Accepted Answer

Salut


Télécharge SmitfraudFix
Utilitaire de S!Ri: Moe et balltrap34
http://siri.urz.free.fr/Fix/SmitfraudFix.php 

http://www.malekal.com/tutorial_SmitFraudfix.php 
et télécharge SmitfraudFix.exe.

Regarde le tuto

Exécute le en choisissant l’option 1,
il va générer un rapport
Copie/colle le sur le poste stp.

Ensuite


1) Télécharge LSPfix 
http://www.downloads.subratam.org/lspfix.zip
http://www.zdnet.fr/telecharger/windows/fiche/telecharger/0,39033957,39138667s,00.htm

* Lance LSPfix
* Déconnecte-toi d'Internet et ferme toutes les fenêtres d'Internet Explorer.
* Coche la case "I know what I'm doing"
* Sélectionne toutes les instances des dll suivantes (s'il y en a, sinon ferme LSPfix) :

vsocklib.dll

* fait passer du panneau gauche "keep" au panneau de droite "Remove" en sélectionnant la ligne et en cliquant sur le >> (double chevron) qui se trouve entre les deux panneaux.
Clique sur le bouton "Finish".
(Si elles sont déjà dans le panneau "Remove" alors clique directement sur le bouton "Finish".)







Bon courage
A++

archet9 · Answer

bonsoir

Commence par poster un rapport HijackThis stp, 
>Télécharge HiJackThis : http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis 
- Lance le programme, puis sélectionne < do a system scan and save a logfile > 
- Enregistre le rapport sur ton bureau. 
Et envoie, par copier/coller, ton log Hijackthis sur le forum, 


A+ 

Tuto : si problème : http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

alexsofa · Answer

Bonsoir, et merci de me répondre si vite.

Euh, d'entrée de jeu, j'ai un réseau local à la maison, est ce que je risque d'infecter mes autres pcs ? 

Voici le log hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:41:23, on 27/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\OEM02Mon.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\VMware\VMware Workstation\vmware-tray.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32	askswitch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\frmwrk32.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Alex\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\vmnat.exe
C:\Program Files\UltraVNC\WinVNC.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
C:\WINDOWS\system32\vmnetdhcp.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.vmware.com/info?id=324
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll (file missing)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Loader Class - {F880A4A8-C436-4AC4-AFD1-AA0BDC9552DD} - C:\WINDOWS\BricoPacks\LeopardXP\FindeXer.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start
O4 - HKLM\..\Run: [OEM02Mon.exe] C:\WINDOWS\OEM02Mon.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [vmware-tray] C:\Program Files\VMware\VMware Workstation\vmware-tray.exe
O4 - HKLM\..\Run: [WinVNC] "C:\Program Files\UltraVNC\WinVNC.exe" -servicehelper
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32	askswitch.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Framework Windows] frmwrk32.exe
O4 - HKLM\..\Run: [SpywareCleaner] C:\WINDOWS\system32\SpywareRemover.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Alex\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware workstation\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware workstation\vsocklib.dll
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-ufad.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe
O23 - Service: VNC Server (winvnc) - UltraVNC - C:\Program Files\UltraVNC\WinVNC.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

Mmsl35_ · Answer

>Fais une anlyse antivirus complete avec bitdfender online(avec internet explorer) puis pose le rapport.

http://www.bitdefender.fr/scan_fr/scan8/ie.html

 --puis poste un rapport HijackThis stp,
>Télécharge HiJackThis : https://www.commentcamarche.net/telecharger/ 159 hijackthis
- Lance le programme, puis sélectionne < do a system scan and save a logfile >
- Enregistre le rapport sur ton bureau.
Et envoie, par copier/coller, ton log Hijackthis sur le forum, 

Démo : (Merci a Balltrap34 pour cette réalisation)
http://pageperso.aol.fr/balltrap34/demohijack.htm
---

alexsofa · Answer

Merci merci,  le log hijackthis est juste au dessus, et l'analyse bitdefender online est en cours....

alexsofa · Answer

Par contre, Antivir crise à chaque fois que je touche au fichier .exe de SmitfraudFix, c'est normal ?

alexsofa · Answer

Et voilà....
Comment je fais pour envoyer le rapport bitdefender ? c'est du achtéèmèle ou bien du txt illisible....

Ensuite, voilà le nouveau rapport Hijackthis.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:30:23, on 27/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\OEM02Mon.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\VMware\VMware Workstation\vmware-tray.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32	askswitch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\frmwrk32.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Alex\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\vmnat.exe
C:\Program Files\UltraVNC\WinVNC.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
C:\WINDOWS\system32\vmnetdhcp.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\PROGRA~1\MICROS~3\Office12\OUTLOOK.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.vmware.com/info?id=324
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll (file missing)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Loader Class - {F880A4A8-C436-4AC4-AFD1-AA0BDC9552DD} - C:\WINDOWS\BricoPacks\LeopardXP\FindeXer.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start
O4 - HKLM\..\Run: [OEM02Mon.exe] C:\WINDOWS\OEM02Mon.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [vmware-tray] C:\Program Files\VMware\VMware Workstation\vmware-tray.exe
O4 - HKLM\..\Run: [WinVNC] "C:\Program Files\UltraVNC\WinVNC.exe" -servicehelper
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32	askswitch.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Framework Windows] frmwrk32.exe
O4 - HKLM\..\Run: [SpywareCleaner] C:\WINDOWS\system32\SpywareRemover.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Alex\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware workstation\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware workstation\vsocklib.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-ufad.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe
O23 - Service: VNC Server (winvnc) - UltraVNC - C:\Program Files\UltraVNC\WinVNC.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

alexsofa · Answer

Bon les grands, je vais filer, on reprend demain ? merci pour tout

alexsofa · Answer

Bonjour bonjour, 

Et re - sur le breche... j'ai laissé tourner Antivir cette nuit, il a trouvé des trucs et les a supprimés, mais le probème presiste ! 

Quelqu'un se sent d'attaque ?

alexsofa · Answer

Ca a avancé je crois.
J'ai fait un scan avec Malwarebytes anti malware, il a trouvé le truc je crois, et les a apparemment supprimés, le fond d'écran a disparu, et plus d'icone dans le tray.

Voici le rapport : 
Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1430
Windows 5.1.2600 Service Pack 3

28/11/2008 09:54:18
mbam-log-2008-11-28 (09-54-18).txt

Type de recherche: Examen rapide
Eléments examinés: 50390
Temps écoulé: 6 minute(s), 7 second(s)

Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 7
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 4

Processus mémoire infecté(s):
C:\WINDOWS\system32\frmwrk32.exe (Trojan.FakeAlert) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Framework Windows (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\activedesktop\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32
tdll64.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\warning.gif (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ahtn.htm (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\frmwrk32.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

alexsofa · Answer

Et le rapport Hijackthis juste après : 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:59:53, on 28/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\vmnat.exe
C:\Program Files\UltraVNC\WinVNC.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\vmnetdhcp.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\OEM02Mon.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\VMware\VMware Workstation\vmware-tray.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32	askswitch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\SpywareRemover.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Alex\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\VMware\VMware Workstation\vmware.exe
C:\Program Files\VMware\VMware Workstation\vmware-vmx.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.vmware.com/info?id=324
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll (file missing)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Loader Class - {F880A4A8-C436-4AC4-AFD1-AA0BDC9552DD} - C:\WINDOWS\BricoPacks\LeopardXP\FindeXer.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start
O4 - HKLM\..\Run: [OEM02Mon.exe] C:\WINDOWS\OEM02Mon.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [vmware-tray] C:\Program Files\VMware\VMware Workstation\vmware-tray.exe
O4 - HKLM\..\Run: [WinVNC] "C:\Program Files\UltraVNC\WinVNC.exe" -servicehelper
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32	askswitch.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SpywareCleaner] C:\WINDOWS\system32\SpywareRemover.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Alex\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware workstation\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware workstation\vsocklib.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-ufad.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe
O23 - Service: VNC Server (winvnc) - UltraVNC - C:\Program Files\UltraVNC\WinVNC.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

alexsofa · Answer

Ca sent pluot bon je crois, par contre au redémarrage il y a eu une fenetre me demandant de faire une mise à jour de flash par adobe, qui avait l'air vraie, mais rien ne s'est produit quand j'ai cliqué sur installer... louche.

alexsofa · Answer

Et après un scan minutieux de Malewarebytes... On dirait que je suis tiré d'affaire non ?

Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1430
Windows 5.1.2600 Service Pack 3

28/11/2008 11:19:33
mbam-log-2008-11-28 (11-19-33).txt

Type de recherche: Examen complet (C:\|D:\|H:\|I:\|K:\|)
Eléments examinés: 118853
Temps écoulé: 57 minute(s), 3 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

alexsofa · Answer

^^ c'est pas Maire, c'est Marie ;)

alexsofa · Answer

Ouaip jme doutais bien.... par contre ça ne me dit pas si c'est normal qu'Antivir n'aime pas SmitfraudFix.....

alexsofa · Answer

ok, merci, je mets ca en route

^^Marie^^ · Answer

Salut

Oui, c'est normal, désactive Antivir le temps du scan

MAIS au lieu de faire 36000 scans, suis les indications de archet9 ou de moi.

On verra ce que archet9 en pense

Car c'est un peu le foutoir ce topik

alexsofa · Answer

Rapport de SmitfraudFix :

SmitFraudFix v2.378

Rapport fait à 16:30:17,70, 28/11/2008
Executé à partir de C:\Program Files\Mozilla Firefox\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\vmnat.exe
C:\Program Files\UltraVNC\WinVNC.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\OEM02Mon.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\VMware\VMware Workstation\vmware-tray.exe
C:\WINDOWS\system32	askswitch.exe
C:\WINDOWS\system32\vmnetdhcp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Alex\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\VMware\VMware Workstation\vmware.exe
C:\Program Files\VMware\VMware Workstation\vmware-vmx.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Alex\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\Program Files\Mozilla Firefox\SmitfraudFix\Policies.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Alex


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Alex\LOCALS~1\Temp


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Alex\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Alex\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
 

»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\WINDOWS\system32\userinit.exe,"
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» RK



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Broadcom 440x 10/100 Integrated Controller - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1

Description: Pilote de serveur d'accès au réseau local Bluetooth - Miniport d'ordonnancement de paquets
DNS Server Search Order: 195.7.111.1
DNS Server Search Order: 195.7.112.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{C7459B1D-E122-4C73-BF86-DFE87EC15995}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\..\{EDBC1EE6-C19B-4FEA-AED3-C1F084F62C09}: DhcpNameServer=195.7.111.1 195.7.112.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{C7459B1D-E122-4C73-BF86-DFE87EC15995}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{EDBC1EE6-C19B-4FEA-AED3-C1F084F62C09}: DhcpNameServer=195.7.111.1 195.7.112.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{C7459B1D-E122-4C73-BF86-DFE87EC15995}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{EDBC1EE6-C19B-4FEA-AED3-C1F084F62C09}: DhcpNameServer=195.7.111.1 195.7.112.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

alexsofa · Answer

LspFix : c'est fait pour la vsocklib.dll, 

Il m'a trouvé aussi :
mwsock.dll
winrnr.dll
mdnsNSP.dll
rsvpsp.dll

je les ai lassées pour l'instant.

alexsofa · Answer

Erf, en fait il ne donne aucune indication, il liste des libraries, ok, mais nulle part il ne me dit qu'elles sont néfastes... ca veut dire que je les supprime ?
Ce n'est pas que je refuse de faire ce que tu me dis, mais tu ne m'en indiquais qu'une à supprimer, je ne voudrais pas faire de bêtises...

alexsofa · Answer

j'ai dit un truc qu'il fallait pas dire ?

^^Marie^^ · Answer

Nettoyage :
Démarre en mode sans échec : 
Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter. 
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée. 
Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal ! 
(Si F8 ne marche pas utilise la touche F5). 

http://www.coupdepoucepc.com/modules/news/article.php?storyid=253 
 https://www.micro-astuce.com/depannage/demarrer-mode-sans-echec.php

---------------------------------------------------------------------------- 
Relance le programme Smitfraud, 
Cette fois choisit l’option 2, répond oui a tous ; 
Sauvegarde le rapport, Redémarre en mode normal, 
copie/colle le rapport sauvegardé sur le forum

process.exe
est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
http://www.beyondlogic.org/consulting/processutil/processutil.htm

+ un log Hijackthis en Mode Normal

alexsofa · Answer

Et plop, le nettoyage Smitfraudfix en sans echec, c'est fait :

SmitFraudFix v2.378

Rapport fait à 19:24:32,39, 28/11/2008
Executé à partir de C:\Documents and Settings\Alex\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1       localhost
127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	1000gratisproben.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	www.1001namen.com
127.0.0.1	1001namen.com
127.0.0.1	www.100888290cs.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	www.10sek.com
127.0.0.1	10sek.com
127.0.0.1	www.1-2005-search.com
127.0.0.1	1-2005-search.com
127.0.0.1	123haustiereundmehr.com
127.0.0.1	www.123haustiereundmehr.com
127.0.0.1	www.123simsen.com
127.0.0.1	123simsen.com
127.0.0.1	123topsearch.com
127.0.0.1	www.123topsearch.com
127.0.0.1	125sms.co.uk
127.0.0.1	www.125sms.co.uk
127.0.0.1	125sms.com
127.0.0.1	www.125sms.com
127.0.0.1	www.132.com
127.0.0.1	132.com
127.0.0.1	136136.net
127.0.0.1	www.136136.net
127.0.0.1	150freesms.de
127.0.0.1	www.150freesms.de
127.0.0.1	163ns.com
127.0.0.1	www.163ns.com
127.0.0.1	171203.com
127.0.0.1	17-plus.com
127.0.0.1	1800searchonline.com
127.0.0.1	www.1800searchonline.com
127.0.0.1	www.180searchassistant.com
127.0.0.1	180searchassistant.com
127.0.0.1	180solutions.com
127.0.0.1	www.180solutions.com
127.0.0.1	181.365soft.info
127.0.0.1	www.181.365soft.info
127.0.0.1	1987324.com
127.0.0.1	www.1987324.com
127.0.0.1	www.1-domains-registrations.com
127.0.0.1	1-domains-registrations.com
127.0.0.1	www.1sexparty.com
127.0.0.1	1sexparty.com
127.0.0.1	www.1sms.de
127.0.0.1	1sms.de
127.0.0.1	www.1stantivirus.com
127.0.0.1	1stantivirus.com
127.0.0.1	www.1stpagehere.com
127.0.0.1	1stpagehere.com
127.0.0.1	www.1stsearchportal.com
127.0.0.1	1stsearchportal.com
127.0.0.1	2.82211.net
127.0.0.1	2006ooo.com
127.0.0.1	www.2006ooo.com
127.0.0.1	www.2007-download.com
127.0.0.1	2007-download.com
127.0.0.1	www.2008search-destroy.com
127.0.0.1	2008search-destroy.com
127.0.0.1	www.2008-search-destroy.com
127.0.0.1	2008-search-destroy.com
127.0.0.1	2009--access.com
127.0.0.1	www.2009--access.com
127.0.0.1	www.2020search.com
127.0.0.1	2020search.com
127.0.0.1	20x2p.com
127.0.0.1	2-2005-search.com
127.0.0.1	www.2-2005-search.com
127.0.0.1	www.24.365soft.info
127.0.0.1	24.365soft.info
127.0.0.1	24-7pharmacy.info
127.0.0.1	www.24-7pharmacy.info
127.0.0.1	24-7searching-and-more.com
127.0.0.1	www.24-7searching-and-more.com
127.0.0.1	www.24teen.com
127.0.0.1	24teen.com
127.0.0.1	2ndpower.com
127.0.0.1	www.2search.com
127.0.0.1	2search.com
127.0.0.1	www.2search.org
127.0.0.1	2search.org
127.0.0.1	www.2squared.com
127.0.0.1	2squared.com
127.0.0.1	www.3-2005-search.com
127.0.0.1	3-2005-search.com
127.0.0.1	www.321-gratis-sms.com
127.0.0.1	321-gratis-sms.com
127.0.0.1	www.3322.org
127.0.0.1	3322.org
127.0.0.1	365soft.info
127.0.0.1	www.36site.com
127.0.0.1	36site.com
127.0.0.1	3721.com
127.0.0.1	39-93.com
127.0.0.1	www.3bay.it
127.0.0.1	3bay.it
127.0.0.1	www.3xclipsonline.com
127.0.0.1	3xclipsonline.com
127.0.0.1	www.3xcurves.com
127.0.0.1	3xcurves.com
127.0.0.1	www.3xfestival.com
127.0.0.1	3xfestival.com
127.0.0.1	3x-festival.com
127.0.0.1	www.3x-festival.com
127.0.0.1	3x-galls.com
127.0.0.1	www.3x-galls.com
127.0.0.1	www.3xmiracle.com
127.0.0.1	3xmiracle.com
127.0.0.1	www.3xmoviesblog.com
127.0.0.1	3xmoviesblog.com
127.0.0.1	404dns.com
127.0.0.1	www.404dns.com
127.0.0.1	www.4199.com
127.0.0.1	4199.com
127.0.0.1	4-2005-search.com
127.0.0.1	www.4-2005-search.com
127.0.0.1	www.4corn.net
127.0.0.1	4corn.net
127.0.0.1	www.4ebay.it
127.0.0.1	4ebay.it
127.0.0.1	4klm.com
127.0.0.1	www.4mpg.com
127.0.0.1	4mpg.com
127.0.0.1	www.5-2005-search.com
127.0.0.1	5-2005-search.com
127.0.0.1	www.59cn.cn
127.0.0.1	59cn.cn
127.0.0.1	www.5starsblog.com
127.0.0.1	5starsblog.com
127.0.0.1	www.5zgmu7o20kt5d8yq.com
127.0.0.1	5zgmu7o20kt5d8yq.com
127.0.0.1	www.6000vornamen.de
127.0.0.1	6000vornamen.de
127.0.0.1	www.680180.net
127.0.0.1	680180.net
127.0.0.1	www.6sek.com
127.0.0.1	6sek.com
127.0.0.1	www.70-music.com
127.0.0.1	70-music.com
127.0.0.1	www.7322.com
127.0.0.1	7322.com
127.0.0.1	www.745970.com
127.0.0.1	745970.com
127.0.0.1	75tz.com
127.0.0.1	www.777search.com
127.0.0.1	777search.com
127.0.0.1	www.777top.com
127.0.0.1	777top.com
127.0.0.1	www.7939.com
127.0.0.1	7939.com
127.0.0.1	www.7search.com
127.0.0.1	7search.com
127.0.0.1	80gw6ry3i3x3qbrkwhxhw.032439.com
127.0.0.1	www.80-music.com
127.0.0.1	80-music.com
127.0.0.1	82211.net
127.0.0.1	8866.org
127.0.0.1	www.88sms.ch
127.0.0.1	88sms.ch
127.0.0.1	www.88vcd.com
127.0.0.1	88vcd.com
127.0.0.1	www.8ad.com
127.0.0.1	8ad.com
127.0.0.1	www.90-music.com
127.0.0.1	90-music.com
127.0.0.1	www.9505.com
127.0.0.1	9505.com
127.0.0.1	www.971searchbox.com
127.0.0.1	971searchbox.com
127.0.0.1	9mmporn.com
127.0.0.1	a.bestmanage.org
127.0.0.1	www.aaabesthomepage.com
127.0.0.1	aaabesthomepage.com
127.0.0.1	aaasexypics.com
127.0.0.1	aaawebfinder.com
127.0.0.1	www.aaawebfinder.com
127.0.0.1	aaqadarsztriv.com
127.0.0.1	www.aaqadarsztriv.com
127.0.0.1	www.aaqada-rsztriv.com
127.0.0.1	aaqada-rsztriv.com
127.0.0.1	aaqadaueorn.com
127.0.0.1	www.aaqadaueorn.com
127.0.0.1	aaqada-ueorn.com
127.0.0.1	www.aaqada-ueorn.com
127.0.0.1	www.aaqada-ygco.com
127.0.0.1	aaqada-ygco.com
127.0.0.1	aaqada-ymct.com
127.0.0.1	www.aaqada-ymct.com
127.0.0.1	aaszxy.ru
127.0.0.1	www.aaszxy.ru
127.0.0.1	aav2008.com
127.0.0.1	www.aav2008.com
127.0.0.1	aavc.com
127.0.0.1	www.abccodec.com
127.0.0.1	abccodec.com
127.0.0.1	abcdperformance.com
127.0.0.1	www.abcdperformance.com
127.0.0.1	abc-find.info
127.0.0.1	www.abc-find.info
127.0.0.1	www.abcsearch.com
127.0.0.1	abcsearch.com
127.0.0.1	abcways.com
127.0.0.1	www.abcways.com
127.0.0.1	www.abetterinternet.com
127.0.0.1	abetterinternet.com
127.0.0.1	abnetsoft.info
127.0.0.1	www.abnetsoft.info
127.0.0.1	about-adult.net
127.0.0.1	www.about-adult.net
127.0.0.1	aboutclicker.com
127.0.0.1	www.aboutclicker.com
127.0.0.1	www.abrp.net
127.0.0.1	abrp.net
127.0.0.1	absolutee.com
127.0.0.1	www.absolutee.com
127.0.0.1	www.ac66.cn
127.0.0.1	ac66.cn
127.0.0.1	access.navinetwork.com
127.0.0.1	access.rapid-pass.net
127.0.0.1	accessactivexvideo.com
127.0.0.1	www.accessactivexvideo.com
127.0.0.1	accessclips.com
127.0.0.1	www.accessclips.com
127.0.0.1	access-dvd.com
127.0.0.1	www.access-dvd.com
127.0.0.1	accesskeygenerator.com
127.0.0.1	www.accesskeygenerator.com
127.0.0.1	accessthefuture.net
127.0.0.1	www.accessthefuture.net
127.0.0.1	accessvid.net
127.0.0.1	www.accessvid.net
127.0.0.1	acemedic.com
127.0.0.1	www.acemedic.com
127.0.0.1	www.ace-webmaster.com
127.0.0.1	ace-webmaster.com
127.0.0.1	acjp.com
127.0.0.1	acrobat-2007.com
127.0.0.1	www.acrobat-2007.com
127.0.0.1	www.acrobat-8.com
127.0.0.1	acrobat-8.com
127.0.0.1	acrobat-center.com
127.0.0.1	www.acrobat-center.com
127.0.0.1	acrobat-hq.com
127.0.0.1	www.acrobat-hq.com
127.0.0.1	www.acrobatreader-8.com
127.0.0.1	acrobatreader-8.com
127.0.0.1	www.acrobat-reader-8.de
127.0.0.1	acrobat-reader-8.de
127.0.0.1	www.acrobat-stop.com
127.0.0.1	acrobat-stop.com
127.0.0.1	actionbreastcancer.org
127.0.0.1	www.actionbreastcancer.org
127.0.0.1	www.activesearcher.info
127.0.0.1	activesearcher.info
127.0.0.1	activexaccessobject.com
127.0.0.1	www.activexaccessobject.com
127.0.0.1	www.activexaccessvideo.com
127.0.0.1	activexaccessvideo.com
127.0.0.1	activexemedia.com
127.0.0.1	www.activexemedia.com
127.0.0.1	activexmediaobject.com
127.0.0.1	www.activexmediaobject.com
127.0.0.1	activexmediapro.com
127.0.0.1	www.activexmediapro.com
127.0.0.1	www.activexmediasite.com
127.0.0.1	activexmediasite.com
127.0.0.1	activexmediasoftware.com
127.0.0.1	www.activexmediasoftware.com
127.0.0.1	www.activexmediasource.com
127.0.0.1	activexmediasource.com
127.0.0.1	activexmediatool.com
127.0.0.1	www.activexmediatool.com
127.0.0.1	activexmediatour.com
127.0.0.1	www.activexmediatour.com
127.0.0.1	www.activexsoftwares.com
127.0.0.1	activexsoftwares.com
127.0.0.1	activexsource.com
127.0.0.1	www.activexsource.com
127.0.0.1	activexupdate.com
127.0.0.1	www.activexupdate.com
127.0.0.1	activexvideo.com
127.0.0.1	www.activexvideo.com
127.0.0.1	activexvideotool.com
127.0.0.1	www.activexvideotool.com
127.0.0.1	www.ad.marketingsector.com
127.0.0.1	ad.marketingsector.com
127.0.0.1	ad.mokead.com
127.0.0.1	www.ad.mokead.com
127.0.0.1	ad.oinadserver.com
127.0.0.1	ad.outerinfoads.com
127.0.0.1	www.ad25.com
127.0.0.1	ad25.com
127.0.0.1	ad45.com
127.0.0.1	www.ad45.com
127.0.0.1	www.ad77.com
127.0.0.1	ad77.com
127.0.0.1	www.ad86.com
127.0.0.1	ad86.com
127.0.0.1	www.adamsupportgroup.org
127.0.0.1	adamsupportgroup.org
127.0.0.1	adarmor.com
127.0.0.1	www.adarmor.com
127.0.0.1	adasearch.com
127.0.0.1	www.adasearch.com
127.0.0.1	adaware.cc
127.0.0.1	www.adawarenow.com
127.0.0.1	adawarenow.com
127.0.0.1	adchannel.contextplus.net
127.0.0.1	www.addetect.com
127.0.0.1	addetect.com
127.0.0.1	add-hhh.info
127.0.0.1	www.add-hhh.info
127.0.0.1	addictivetechnologies.com
127.0.0.1	www.addictivetechnologies.com
127.0.0.1	www.addictivetechnologies.net
127.0.0.1	addictivetechnologies.net
127.0.0.1	www.addioerrori.com
127.0.0.1	addioerrori.com
127.0.0.1	www.add-manager.com
127.0.0.1	add-manager.com
127.0.0.1	www.adgate.info
127.0.0.1	adgate.info
127.0.0.1	www.adintelligence.net
127.0.0.1	adintelligence.net
127.0.0.1	adioserrores.com
127.0.0.1	www.adioserrores.com
127.0.0.1	www.adipics.com
127.0.0.1	adipics.com
127.0.0.1	www.adlogix.com
127.0.0.1	adlogix.com
127.0.0.1	www.admin2cash.biz
127.0.0.1	admin2cash.biz
127.0.0.1	adnet-plus.com
127.0.0.1	www.adnetserver.com
127.0.0.1	adnetserver.com
127.0.0.1	adobe-download-now.com
127.0.0.1	www.adobe-downloads.com
127.0.0.1	adobe-downloads.com
127.0.0.1	www.adobe-reader-8.fr
127.0.0.1	adobe-reader-8.fr
127.0.0.1	www.adprotect.com
127.0.0.1	adprotect.com
127.0.0.1	ads.centralmedia.ws
127.0.0.1	ads.k8l.info
127.0.0.1	ads.kmpads.com
127.0.0.1	ads.kw.revenue.net
127.0.0.1	ads.marketingsector.com
127.0.0.1	ads.searchingbooth.com
127.0.0.1	ads.z-quest.com
127.0.0.1	ads1.revenue.net
127.0.0.1	ads183.com
127.0.0.1	www.ads183.com
127.0.0.1	adscontex.com
127.0.0.1	www.adscontex.com
127.0.0.1	www.adservices1.enhance.com
127.0.0.1	adservices1.enhance.com
127.0.0.1	adservs.com
127.0.0.1	adsextend.net
127.0.0.1	www.adsextend.net
127.0.0.1	adshttp.com
127.0.0.1	www.adshttp.com
127.0.0.1	adsniffer.com
127.0.0.1	www.adsniffer.com
127.0.0.1	www.adsonwww.com
127.0.0.1	adsonwww.com
127.0.0.1	adspics.com
127.0.0.1	www.adspics.com
127.0.0.1	www.adsrevenue.net
127.0.0.1	adsrevenue.net
127.0.0.1	www.adtrak.net
127.0.0.1	adtrak.net
127.0.0.1	adtrgt.com
127.0.0.1	www.adult18codec.com
127.0.0.1	adult18codec.com
127.0.0.1	adult777search.info
127.0.0.1	www.adult777search.info
127.0.0.1	www.adultan.com
127.0.0.1	adultan.com
127.0.0.1	adultcodec-2008.com
127.0.0.1	www.adultcodec-2008.com
127.0.0.1	adultcodecstars.com
127.0.0.1	www.adultcodecstars.com
127.0.0.1	www.adult-engine-search.com
127.0.0.1	adult-engine-search.com
127.0.0.1	www.adult-erotic-guide.net
127.0.0.1	adult-erotic-guide.net
127.0.0.1	adultfilmsite.com
127.0.0.1	www.adultfilmsite.com
127.0.0.1	www.adult-friends-finder.net
127.0.0.1	adult-friends-finder.net
127.0.0.1	adultgambling.org
127.0.0.1	adult-host.org
127.0.0.1	www.adulthyperlinks.com
127.0.0.1	adulthyperlinks.com
127.0.0.1	adultmovieplus.com
127.0.0.1	www.adultmovieplus.com
127.0.0.1	adult-mpg.net
127.0.0.1	www.adult-mpg.net
127.0.0.1	adult-personal.us
127.0.0.1	adultsgames.net
127.0.0.1	www.adultsonlyvids.com
127.0.0.1	adultsonlyvids.com
127.0.0.1	www.adultsper.com
127.0.0.1	adultsper.com
127.0.0.1	www.adulttds.com
127.0.0.1	adulttds.com
127.0.0.1	adultzoneworld.com
127.0.0.1	www.adultzoneworld.com
127.0.0.1	www.advancedcleaner.com
127.0.0.1	advancedcleaner.com
127.0.0.1	www.advancedpccleaner.com
127.0.0.1	advancedpccleaner.com
127.0.0.1	www.advancedxpfixer.com
127.0.0.1	advancedxpfixer.com
127.0.0.1	www.advcash.biz
127.0.0.1	advcash.biz
127.0.0.1	advert.exaccess.ru
127.0.0.1	advertisemoney.info
127.0.0.1	www.advertisemoney.info
127.0.0.1	advertising.paltalk.com
127.0.0.1	www.advertising-money.info
127.0.0.1	advertising-money.info
127.0.0.1	www.advert-network.com
127.0.0.1	advert-network.com
127.0.0.1	ad-ware.cc
127.0.0.1	www.ad-w-a-r-e.com
127.0.0.1	ad-w-a-r-e.com
127.0.0.1	www.a-d-w-a-r-e.com
127.0.0.1	a-d-w-a-r-e.com
127.0.0.1	www.adware.pro
127.0.0.1	adware.pro
127.0.0.1	adwarealert.com
127.0.0.1	www.adwarealert.com
127.0.0.1	ad-warealert.com
127.0.0.1	www.ad-warealert.com
127.0.0.1	www.adwarearrest.com
127.0.0.1	adwarearrest.com
127.0.0.1	adwarebazooka.com
127.0.0.1	www.adwarebazooka.com
127.0.0.1	www.adwarebot.com
127.0.0.1	adwarebot.com
127.0.0.1	adwarecommander.com
127.0.0.1	www.adwarecommander.com
127.0.0.1	adware-download.com
127.0.0.1	www.adware-download.com
127.0.0.1	www.adwarefinder.com
127.0.0.1	adwarefinder.com
127.0.0.1	www.adwaregold.com
127.0.0.1	adwaregold.com
127.0.0.1	www.adwarepatrol.com
127.0.0.1	adwarepatrol.com
127.0.0.1	www.adwareplatinum.com
127.0.0.1	adwareplatinum.com
127.0.0.1	www.adwarepro.org
127.0.0.1	adwarepro.org
127.0.0.1	www.adwareprotectionsite.com
127.0.0.1	adwareprotectionsite.com
127.0.0.1	www.adwarepunisher.com
127.0.0.1	adwarepunisher.com
127.0.0.1	www.adwareremover.ws
127.0.0.1	adwareremover.ws
127.0.0.1	www.adwaresafety.com
127.0.0.1	adwaresafety.com
127.0.0.1	www.adwarexp.com
127.0.0.1	adwarexp.com
127.0.0.1	www.adwareye.com
127.0.0.1	adwareye.com
127.0.0.1	affiliate.idownload.com
127.0.0.1	www.aflgate.com
127.0.0.1	aflgate.com
127.0.0.1	africaspromise.org
127.0.0.1	agava.com
127.0.0.1	agava.ru
127.0.0.1	agentstudio.com
127.0.0.1	www.ageofconans.net
127.0.0.1	ageofconans.net
127.0.0.1	www.aginegialle.it
127.0.0.1	aginegialle.it
127.0.0.1	www.ahnenforschung.de
127.0.0.1	ahnenforschung.de
127.0.0.1	www.aifind.info
127.0.0.1	aifind.info
127.0.0.1	www.airtleworld.com
127.0.0.1	airtleworld.com
127.0.0.1	www.aitalia.it
127.0.0.1	aitalia.it
127.0.0.1	akamai.downloadv3.com
127.0.0.1	www.aklitalia.it
127.0.0.1	aklitalia.it
127.0.0.1	akril.com
127.0.0.1	alcatel.ws
127.0.0.1	www.alertspy.com
127.0.0.1	alertspy.com
127.0.0.1	www.alfacleaner.com
127.0.0.1	alfacleaner.com
127.0.0.1	alfa-search.com
127.0.0.1	www.alialia.it
127.0.0.1	alialia.it
127.0.0.1	www.aliotalia.it
127.0.0.1	aliotalia.it
127.0.0.1	www.alirtalia.it
127.0.0.1	alirtalia.it
127.0.0.1	www.alitaia.it
127.0.0.1	alitaia.it
127.0.0.1	www.alitaklia.it
127.0.0.1	alitaklia.it
127.0.0.1	www.alitala.it
127.0.0.1	alitala.it
127.0.0.1	www.alitali.it
127.0.0.1	alitali.it
127.0.0.1	www.alitaliaq.it
127.0.0.1	alitaliaq.it
127.0.0.1	www.alitalias.it
127.0.0.1	alitalias.it
127.0.0.1	www.alitaliaz.it
127.0.0.1	alitaliaz.it
127.0.0.1	www.alitalioa.it
127.0.0.1	alitalioa.it
127.0.0.1	www.alitalisa.it
127.0.0.1	alitalisa.it
127.0.0.1	www.alitaliua.it
127.0.0.1	alitaliua.it
127.0.0.1	www.alitalkia.it
127.0.0.1	alitalkia.it
127.0.0.1	www.alitaloia.it
127.0.0.1	alitaloia.it
127.0.0.1	www.alitaluia.it
127.0.0.1	alitaluia.it
127.0.0.1	www.alitaslia.it
127.0.0.1	alitaslia.it
127.0.0.1	www.alitlia.it
127.0.0.1	alitlia.it
127.0.0.1	www.alitralia.it
127.0.0.1	alitralia.it
127.0.0.1	www.alitsalia.it
127.0.0.1	alitsalia.it
127.0.0.1	www.aliutalia.it
127.0.0.1	aliutalia.it
127.0.0.1	www.all1count.net
127.0.0.1	all1count.net
127.0.0.1	all4internet.com
127.0.0.1	www.all4internet.com
127.0.0.1	allabtcars.com
127.0.0.1	allabtjeeps.com
127.0.0.1	all-bittorrent.com
127.0.0.1	www.all-bittorrent.com
127.0.0.1	www.allcollisions.com
127.0.0.1	allcollisions.com
127.0.0.1	allcybersearch.com
127.0.0.1	www.allcybersearch.com
127.0.0.1	www.alldiskscheck300.com
127.0.0.1	alldiskscheck300.com
127.0.0.1	alldnserrors.com
127.0.0.1	www.alldnserrors.com
127.0.0.1	all-downloads-now.com
127.0.0.1	www.all-downloads-now.com
127.0.0.1	www.all-edonkey.com
127.0.0.1	all-edonkey.com
127.0.0.1	allertaminacce.com
127.0.0.1	www.allertaminacce.com
127.0.0.1	allforadult.com
127.0.0.1	allhyperlinks.com
127.0.0.1	alliesecurity.com
127.0.0.1	www.alliesecurity.com
127.0.0.1	all-inet.com
127.0.0.1	allinternetbusiness.com
127.0.0.1	www.all-limewire.com
127.0.0.1	all-limewire.com
127.0.0.1	www.allmegabucks.com
127.0.0.1	allmegabucks.com
127.0.0.1	www.allprotections.com
127.0.0.1	allprotections.com
127.0.0.1	www.allresultz.net
127.0.0.1	allresultz.net
127.0.0.1	www.allsearch.us
127.0.0.1	allsearch.us
127.0.0.1	www.allsecuritynotes.com
127.0.0.1	allsecuritynotes.com
127.0.0.1	www.allsecuritysite.com
127.0.0.1	allsecuritysite.com
127.0.0.1	www.allstarsvideos.net
127.0.0.1	allstarsvideos.net
127.0.0.1	www.alltiettantivirus.com
127.0.0.1	alltiettantivirus.com
127.0.0.1	www.alltruesoftware.com
127.0.0.1	alltruesoftware.com
127.0.0.1	www.allvideoactivex.com
127.0.0.1	allvideoactivex.com
127.0.0.1	www.almanah.biz
127.0.0.1	almanah.biz
127.0.0.1	almarvideos.com
127.0.0.1	www.aloitalia.it
127.0.0.1	aloitalia.it
127.0.0.1	www.alphawipe.com
127.0.0.1	alphawipe.com
127.0.0.1	www.aluitalia.it
127.0.0.1	aluitalia.it
127.0.0.1	www.amaena.com
127.0.0.1	amaena.com
127.0.0.1	amandamountains.com
127.0.0.1	www.amateurliveshow.com
127.0.0.1	amateurliveshow.com
127.0.0.1	www.amediasoftware.com
127.0.0.1	amediasoftware.com
127.0.0.1	www.amediasource.com
127.0.0.1	amediasource.com
127.0.0.1	www.americanautobargains.com
127.0.0.1	americanautobargains.com
127.0.0.1	www.americancarbargains.com
127.0.0.1	americancarbargains.com
127.0.0.1	american-teens.net
127.0.0.1	amigeek.com
127.0.0.1	www.amigobore.com
127.0.0.1	amigobore.com
127.0.0.1	amisbusiness.com
127.0.0.1	www.ampmsearch.com
127.0.0.1	ampmsearch.com
127.0.0.1	www.analcord.com
127.0.0.1	analcord.com
127.0.0.1	analmovi.com
127.0.0.1	www.anarchylolita.com
127.0.0.1	anarchylolita.com
127.0.0.1	anarchyporn.com
127.0.0.1	www.andromedical.com
127.0.0.1	andromedical.com
127.0.0.1	www.animepornmag.com
127.0.0.1	animepornmag.com
127.0.0.1	anin.org
127.0.0.1	www.anjpn-avxiz.biz
127.0.0.1	anjpn-avxiz.biz
127.0.0.1	anjpnzqav.biz
127.0.0.1	www.anjpnzqav.biz
127.0.0.1	anjpn-zqav.biz
127.0.0.1	www.anjpn-zqav.biz
127.0.0.1	annaromeo.com
127.0.0.1	antiddos.us
127.0.0.1	www.antiddos.us
127.0.0.1	antiespiadorado.com
127.0.0.1	www.antiespiadorado.com
127.0.0.1	www.antiespionspack.com
127.0.0.1	antiespionspack.com
127.0.0.1	www.antigusanos2008.com
127.0.0.1	antigusanos2008.com
127.0.0.1	www.antispamassistant.com
127.0.0.1	antispamassistant.com
127.0.0.1	antispamdeluxe.com
127.0.0.1	www.antispamdeluxe.com
127.0.0.1	antispionage.com
127.0.0.1	www.antispionage.com
127.0.0.1	www.antispionagepro.com
127.0.0.1	antispionagepro.com
127.0.0.1	antispyadvanced.com
127.0.0.1	www.antispyadvanced.com
127.0.0.1	antispycheck.com
127.0.0.1	www.antispycheck.com
127.0.0.1	www.antispydns.biz
127.0.0.1	antispydns.biz
127.0.0.1	www.antispykit.com
127.0.0.1	antispykit.com
127.0.0.1	antispylab.com
127.0.0.1	www.antispylab.com
127.0.0.1	antispyshield.com
127.0.0.1	www.antispyshield.com
127.0.0.1	antispysolutions.com
127.0.0.1	www.antispysolutions.com
127.0.0.1	antispyware.com
127.0.0.1	www.antispyware.com
127.0.0.1	antispyware-2008.info
127.0.0.1	www.antispyware-2008.info
127.0.0.1	www.antispyware2008.name
127.0.0.1	antispyware2008.name
127.0.0.1	www.antispyware-2008.name
127.0.0.1	antispyware-2008.name
127.0.0.1	antispyware2008.org
127.0.0.1	www.antispyware2008.org
127.0.0.1	antispyware-2008.org
127.0.0.1	www.antispyware-2008.org
127.0.0.1	antispyware2008-download.com
127.0.0.1	www.antispyware2008-download.com
127.0.0.1	antispyware-2008-download.com
127.0.0.1	www.antispyware-2008-download.com
127.0.0.1	www.antispyware2008-download.name
127.0.0.1	antispyware2008-download.name
127.0.0.1	antispyware2008-download.org
127.0.0.1	www.antispyware2008-download.org
127.0.0.1	www.antispyware-2008-download.org
127.0.0.1	antispyware-2008-download.org
127.0.0.1	www.antispywareboot.com
127.0.0.1	antispywareboot.com
127.0.0.1	www.antispywarebot.com
127.0.0.1	antispywarebot.com
127.0.0.1	www.antispywarebox.com
127.0.0.1	antispywarebox.com
127.0.0.1	www.antispywaredownloads.com
127.0.0.1	antispywaredownloads.com
127.0.0.1	www.antispywareexpert.com
127.0.0.1	antispywareexpert.com
127.0.0.1	www.antispywaremaster.com
127.0.0.1	antispywaremaster.com
127.0.0.1	antispyware-review.biz
127.0.0.1	www.antispyware-review.biz
127.0.0.1	www.antispyware-review.info
127.0.0.1	antispyware-review.info
127.0.0.1	antispywaresales.com
127.0.0.1	www.antispywaresales.com
127.0.0.1	www.antispywaresuite.com
127.0.0.1	antispywaresuite.com
127.0.0.1	www.antispywareupdates.net
127.0.0.1	antispywareupdates.net
127.0.0.1	www.antispywarexp.com
127.0.0.1	antispywarexp.com
127.0.0.1	www.antispyweb.net
127.0.0.1	antispyweb.net
127.0.0.1	www.antiver2008.com
127.0.0.1	antiver2008.com
127.0.0.1	www.antivermins.com
127.0.0.1	antivermins.com
127.0.0.1	www.anti-vermins.com
127.0.0.1	anti-vermins.com
127.0.0.1	www.antivir2007.com
127.0.0.1	antivir2007.com
127.0.0.1	antivirgear.com
127.0.0.1	www.antivirgear.com
127.0.0.1	antivirprotect.com
127.0.0.1	www.antivirprotect.com
127.0.0.1	www.antivirus.fastfreedownload.com
127.0.0.1	antivirus.fastfreedownload.com
127.0.0.1	www.antivirus2008pro.com
127.0.0.1	antivirus2008pro.com
127.0.0.1	www.antivirus-2008pro.com
127.0.0.1	antivirus-2008pro.com
127.0.0.1	www.antivirus-2008-pro.com
127.0.0.1	antivirus-2008-pro.com
127.0.0.1	antivirus2008pro.info
127.0.0.1	www.antivirus2008pro.info
127.0.0.1	www.antivirus-2008pro.info
127.0.0.1	antivirus-2008pro.info
127.0.0.1	www.antivirus-2008-pro.info
127.0.0.1	antivirus-2008-pro.info
127.0.0.1	antivirus2008pro.net
127.0.0.1	www.antivirus2008pro.net
127.0.0.1	antivirus-2008pro.net
127.0.0.1	www.antivirus-2008pro.net
127.0.0.1	www.antivirus-2008-pro.net
127.0.0.1	antivirus-2008-pro.net
127.0.0.1	antivirus2008pro.org
127.0.0.1	www.antivirus2008pro.org
127.0.0.1	antivirus-2008pro.org
127.0.0.1	www.antivirus-2008pro.org
127.0.0.1	antivirus-2008-pro.org
127.0.0.1	www.antivirus-2008-pro.org
127.0.0.1	www.antivirus2008scanner.com
127.0.0.1	antivirus2008scanner.com
127.0.0.1	antivirus2008x.com
127.0.0.1	www.antivirus2008x.com
127.0.0.1	www.antivirus-2009.com
127.0.0.1	antivirus-2009.com
127.0.0.1	antivirus2009-freescan.com
127.0.0.1	www.antivirus2009-freescan.com
127.0.0.1	antivirus-2009pro.com
127.0.0.1	www.antivirus-2009pro.com
127.0.0.1	antivirus2009professional.com
127.0.0.1	www.antivirus2009professional.com
127.0.0.1	antivirusadvance.com
127.0.0.1	www.antivirusadvance.com
127.0.0.1	antivirusaskeladd.com
127.0.0.1	www.antivirusaskeladd.com
127.0.0.1	www.antivirus-database.com
127.0.0.1	antivirus-database.com
127.0.0.1	www.antivirusgereedschap.com
127.0.0.1	antivirusgereedschap.com
127.0.0.1	antivirusgolden.com
127.0.0.1	www.antivirusgolden.com
127.0.0.1	antivirus-hq.net
127.0.0.1	www.antivirus-hq.net
127.0.0.1	www.antiviruspcsuite.com
127.0.0.1	antiviruspcsuite.com
127.0.0.1	www.antivirusplasma.com
127.0.0.1	antivirusplasma.com
127.0.0.1	www.antiviruspremium.com
127.0.0.1	antiviruspremium.com
127.0.0.1	www.anti-virus-pro.com
127.0.0.1	anti-virus-pro.com
127.0.0.1	www.antivirusprotector.com
127.0.0.1	antivirusprotector.com
127.0.0.1	antivirus-scanner.com
127.0.0.1	www.antivirus-scanner.com
127.0.0.1	www.antivirusscherm.com
127.0.0.1	antivirusscherm.com
127.0.0.1	antivirussecuritypro.com
127.0.0.1	www.antivirussecuritypro.com
127.0.0.1	www.antivirus-server.com
127.0.0.1	antivirus-server.com
127.0.0.1	www.antivirus-stop.com
127.0.0.1	antivirus-stop.com
127.0.0.1	www.antivirussuite.com
127.0.0.1	antivirussuite.com
127.0.0.1	www.antiworm2008.com
127.0.0.1	antiworm2008.com
127.0.0.1	www.antiwurm2008.com
127.0.0.1	antiwurm2008.com
127.0.0.1	antrocity.com
127.0.0.1	www.anyofus.com
127.0.0.1	anyofus.com
127.0.0.1	www.anysafereviews.com
127.0.0.1	anysafereviews.com
127.0.0.1	www.anysn.seproger.com
127.0.0.1	anysn.seproger.com
127.0.0.1	anything4health.com
127.0.0.1	www.apicpreview.com
127.0.0.1	apicpreview.com
127.0.0.1	www.appealcircuit.com
127.0.0.1	appealcircuit.com
127.0.0.1	www.approvedlinks.com
127.0.0.1	approvedlinks.com
127.0.0.1	apps.deskwizz.com
127.0.0.1	apps.webservicehost.com
127.0.0.1	www.aprotectedpage.com
127.0.0.1	aprotectedpage.com
127.0.0.1	apsua.com
127.0.0.1	www.archivioadulti.com
127.0.0.1	archivioadulti.com
127.0.0.1	www.archiviosex.net
127.0.0.1	archiviosex.net
127.0.0.1	aregay.com
127.0.0.1	ares.click-new-download.com
127.0.0.1	www.ares.click-new-download.com
127.0.0.1	www.ares-freebie.com
127.0.0.1	ares-freebie.com
127.0.0.1	www.arespro2007.com
127.0.0.1	arespro2007.com
127.0.0.1	www.aresultra.com
127.0.0.1	aresultra.com
127.0.0.1	ares-usa.com
127.0.0.1	www.ares-usa.com
127.0.0.1	www.areuhot.tv
127.0.0.1	areuhot.tv
127.0.0.1	arheo.com
127.0.0.1	arizonaweb.org
127.0.0.1	armitageinn.com
127.0.0.1	www.arquivojpgs.smtp.ru
127.0.0.1	arquivojpgs.smtp.ru
127.0.0.1	artachnid.com
127.0.0.1	art-func.com
127.0.0.1	art-xxx.com
127.0.0.1	www.asafebrowser.com
127.0.0.1	asafebrowser.com
127.0.0.1	www.asafetyalways.com
127.0.0.1	asafetyalways.com
127.0.0.1	www.asafetynote.com
127.0.0.1	asafetynote.com
127.0.0.1	www.asafetynotice.com
127.0.0.1	asafetynotice.com
127.0.0.1	www.asafetypage.com
127.0.0.1	asafetypage.com
127.0.0.1	www.asdbiz.biz
127.0.0.1	asdbiz.biz
127.0.0.1	www.asdeykuddq.com
127.0.0.1	asdeykuddq.com
127.0.0.1	www.asecurebar.com
127.0.0.1	asecurebar.com
127.0.0.1	www.asecureboard.com
127.0.0.1	asecureboard.com
127.0.0.1	www.asecurevalue.com
127.0.0.1	asecurevalue.com
127.0.0.1	www.asecurityissue.com
127.0.0.1	asecurityissue.com
127.0.0.1	www.asecuritynotice.com
127.0.0.1	asecuritynotice.com
127.0.0.1	www.asecuritypaper.com
127.0.0.1	asecuritypaper.com
127.0.0.1	www.asecuritystuff.com
127.0.0.1	asecuritystuff.com
127.0.0.1	www.asfadaptation.com
127.0.0.1	asfadaptation.com
127.0.0.1	asiankingkong.com
127.0.0.1	www.asianpornmag.com
127.0.0.1	asianpornmag.com
127.0.0.1	www.asiantoolbar.com
127.0.0.1	asiantoolbar.com
127.0.0.1	www.asidseiupc.com
127.0.0.1	asidseiupc.com
127.0.0.1	www.aslitalia.it
127.0.0.1	aslitalia.it
127.0.0.1	www.aspirate.de
127.0.0.1	aspirate.de
127.0.0.1	www.asproxpstorage.com
127.0.0.1	asproxpstorage.com
127.0.0.1	ass-gals.com
127.0.0.1	www.assureprotection.com
127.0.0.1	assureprotection.com
127.0.0.1	asta-killer.com
127.0.0.1	www.astrologie-server.com
127.0.0.1	astrologie-server.com
127.0.0.1	www.asupereva.it
127.0.0.1	asupereva.it
127.0.0.1	www.ataprogram.com
127.0.0.1	ataprogram.com
127.0.0.1	athenrye.com
127.0.0.1	www.atotalsafety.com
127.0.0.1	atotalsafety.com
127.0.0.1	www.atrueprotection.com
127.0.0.1	atrueprotection.com
127.0.0.1	www.atruesecurity.com
127.0.0.1	atruesecurity.com
127.0.0.1	www.attackware.com
127.0.0.1	attackware.com
127.0.0.1	www.attrezzi.biz
127.0.0.1	attrezzi.biz
127.0.0.1	www.aucunsvirus.com
127.0.0.1	aucunsvirus.com
127.0.0.1	www.aulde.net
127.0.0.1	aulde.net
127.0.0.1	www.aupereva.it
127.0.0.1	aupereva.it
127.0.0.1	www.ausgebrannt.com
127.0.0.1	ausgebrannt.com
127.0.0.1	www.ausgewaehlter-gewinner.de
127.0.0.1	ausgewaehlter-gewinner.de
127.0.0.1	www.auswandern-jobs.de
127.0.0.1	auswandern-jobs.de
127.0.0.1	www.autobargains.org
127.0.0.1	autobargains.org
127.0.0.1	www.autobargainsnetwork.com
127.0.0.1	autobargainsnetwork.com
127.0.0.1	www.autocontext.begun.ru
127.0.0.1	autocontext.begun.ru
127.0.0.1	autoescrowpay.com
127.0.0.1	www.autogewinner.com
127.0.0.1	autogewinner.com
127.0.0.1	www.autotuningportal.com
127.0.0.1	autotuningportal.com
127.0.0.1	avadvance.com
127.0.0.1	www.avadvance.com
127.0.0.1	avast.free-software-center.com
127.0.0.1	www.avast.free-software-center.com
127.0.0.1	www.avast-2007.com
127.0.0.1	avast-2007.com
127.0.0.1	www.avast-downloads.com
127.0.0.1	avast-downloads.com
127.0.0.1	www.avast-hq.com
127.0.0.1	avast-hq.com
127.0.0.1	www.avforce.com
127.0.0.1	avforce.com
127.0.0.1	avg.grab-it-today.net
127.0.0.1	www.avg.grab-it-today.net
127.0.0.1	avg.softwarecenterz.com
127.0.0.1	www.avg.softwarecenterz.com
127.0.0.1	www.avg-secure.com
127.0.0.1	avg-secure.com
127.0.0.1	aviadaptation.com
127.0.0.1	www.aviadaptation.com
127.0.0.1	avian-ads.com
127.0.0.1	www.avicoupler.com
127.0.0.1	avicoupler.com
127.0.0.1	avideoaxaccess.com
127.0.0.1	www.avideoaxaccess.com
127.0.0.1	avideosurfer.com
127.0.0.1	www.avideosurfer.com
127.0.0.1	avidirection.com
127.0.0.1	www.avidirection.com
127.0.0.1	www.aviewersoft.com
127.0.0.1	aviewersoft.com
127.0.0.1	aviexecution.com
127.0.0.1	www.aviexecution.com
127.0.0.1	www.avihelper.com
127.0.0.1	avihelper.com
127.0.0.1	aviinstrument.com
127.0.0.1	www.aviinstrument.com
127.0.0.1	aviplugin.com
127.0.0.1	www.aviplugin.com
127.0.0.1	avitool.com
127.0.0.1	www.avitool.com
127.0.0.1	aviupdate.com
127.0.0.1	www.aviupdate.com
127.0.0.1	www.aviutility.com
127.0.0.1	aviutility.com
127.0.0.1	avpcheckupdate.com
127.0.0.1	www.avpcheckupdate.com
127.0.0.1	avsmanufacture.com
127.0.0.1	www.avsmanufacture.com
127.0.0.1	www.avsystemcare.com
127.0.0.1	avsystemcare.com
127.0.0.1	avxizaaqada.biz
127.0.0.1	www.avxizaaqada.biz
127.0.0.1	www.avxiz-anjpn.biz
127.0.0.1	avxiz-anjpn.biz
127.0.0.1	avxizueorn.biz
127.0.0.1	www.avxizueorn.biz
127.0.0.1	avxiz-ueorn.biz
127.0.0.1	www.avxiz-ueorn.biz
127.0.0.1	avxiz-vtvcp.biz
127.0.0.1	www.avxiz-vtvcp.biz
127.0.0.1	avxiz-ygco.biz
127.0.0.1	www.avxiz-ygco.biz
127.0.0.1	avxiz-zqav.biz
127.0.0.1	www.avxiz-zqav.biz
127.0.0.1	av-xp-08.com
127.0.0.1	www.av-xp-08.com
127.0.0.1	www.awarenesstech.com
127.0.0.1	awarenesstech.com
127.0.0.1	www.awarninglist.com
127.0.0.1	awarninglist.com
127.0.0.1	awbeta.net-nucleus.com
127.0.0.1	www.awesomehomepage.com
127.0.0.1	awesomehomepage.com
127.0.0.1	awmcash.biz
127.0.0.1	awmdabest.com
127.0.0.1	www.axemediasoftware.com
127.0.0.1	axemediasoftware.com
127.0.0.1	www.aximageobject.com
127.0.0.1	aximageobject.com
127.0.0.1	www.axmediaproject.com
127.0.0.1	axmediaproject.com
127.0.0.1	www.axmediasoftware.com
127.0.0.1	axmediasoftware.com
127.0.0.1	www.axmediasolutions.com
127.0.0.1	axmediasolutions.com
127.0.0.1	www.axobjectpage.com
127.0.0.1	axobjectpage.com
127.0.0.1	www.axobjectsource.com
127.0.0.1	axobjectsource.com
127.0.0.1	www.axsoftwaretool.com
127.0.0.1	axsoftwaretool.com
127.0.0.1	www.axvideoproject.com
127.0.0.1	axvideoproject.com
127.0.0.1	www.axvideosetup.com
127.0.0.1	axvideosetup.com
127.0.0.1	ayakawamura.com
127.0.0.1	ayb.dns-look-up.com
127.0.0.1	ayb.netbios-wait.com
127.0.0.1	ayumitaniguchi.com
127.0.0.1	azebar.com
127.0.0.1	azureusclub.com
127.0.0.1	www.azureusclub.com
127.0.0.1	azureus-freebie.com
127.0.0.1	www.azureus-freebie.com
127.0.0.1	www.azzetta.it
127.0.0.1	azzetta.it
127.0.0.1	b.casalemedia.com
127.0.0.1	b122.mcboo.com
127.0.0.1	b128.bundlext.com
127.0.0.1	b148.bundlext.com
127.0.0.1	b152.bundlext.com
127.0.0.1	b155.bundlext.com
127.0.0.1	b156.bundlext.com
127.0.0.1	www.babe.k-lined.com
127.0.0.1	babe.k-lined.com
127.0.0.1	www.babe.the-killer.bz
127.0.0.1	babe.the-killer.bz
127.0.0.1	www.babenet.com
127.0.0.1	babenet.com
127.0.0.1	www.babespornmag.com
127.0.0.1	babespornmag.com
127.0.0.1	www.babeweb.de
127.0.0.1	babeweb.de
127.0.0.1	www.baccarat-other.info
127.0.0.1	baccarat-other.info
127.0.0.1	www.backstripgirls.com
127.0.0.1	backstripgirls.com
127.0.0.1	backup.mabou.org
127.0.0.1	www.baiduqqsina.cn
127.0.0.1	baiduqqsina.cn
127.0.0.1	www.balotierra.com
127.0.0.1	balotierra.com
127.0.0.1	bannedhost.net
127.0.0.1	barbudafarms.com
127.0.0.1	www.bardownload.com
127.0.0.1	bardownload.com
127.0.0.1	barnandfence.com
127.0.0.1	basteln.at
127.0.0.1	www.basteln.at
127.0.0.1	www.basteln-heute.com
127.0.0.1	basteln-heute.com
127.0.0.1	basteln-und-heimwerken.com
127.0.0.1	www.basteln-und-heimwerken.com
127.0.0.1	batsearch.com
127.0.0.1	baygraphicsllc.com
127.0.0.1	bb.wudiliuliang.com
127.0.0.1	bbbsearch.com
127.0.0.1	bb-search.com
127.0.0.1	www.bcnproduction.com
127.0.0.1	bcnproduction.com
127.0.0.1	bdsmlibrary.net
127.0.0.1	www.bdsmpornmag.com
127.0.0.1	bdsmpornmag.com
127.0.0.1	www.bearshare.click-new-download.com
127.0.0.1	bearshare.click-new-download.com
127.0.0.1	bearshare.download-me.info
127.0.0.1	www.bearshare.download-me.info
127.0.0.1	www.bearshare.mp3-muzic.com
127.0.0.1	bearshare.mp3-muzic.com
127.0.0.1	www.bearshare-download.org
127.0.0.1	bearshare-download.org
127.0.0.1	www.bearshare-downloads.net
127.0.0.1	bearshare-downloads.net
127.0.0.1	www.bearsharelive.co.uk
127.0.0.1	bearsharelive.co.uk
127.0.0.1	bearshare-music-downloads.com
127.0.0.1	www.bearshare-music-downloads.com
127.0.0.1	bearsharepro2007.com
127.0.0.1	www.bearsharepro2007.com
127.0.0.1	bearshare-usa.com
127.0.0.1	www.bearshare-usa.com
127.0.0.1	bedhome.com
127.0.0.1	bediadance.com
127.0.0.1	www.beebappyy.biz
127.0.0.1	beebappyy.biz
127.0.0.1	www.begin2search.com
127.0.0.1	begin2search.com
127.0.0.1	bellabasketsfl.com
127.0.0.1	www.benzin-billiger.net
127.0.0.1	benzin-billiger.net
127.0.0.1	bernaolatwin.com
127.0.0.1	www.berufe-beratung.de
127.0.0.1	berufe-beratung.de
127.0.0.1	www.berufe-info.com
127.0.0.1	berufe-info.com
127.0.0.1	www.berufe-jobs.de
127.0.0.1	berufe-jobs.de
127.0.0.1	www.berufe-server.de
127.0.0.1	berufe-server.de
127.0.0.1	www.berufe-testen.de
127.0.0.1	berufe-testen.de
127.0.0.1	www.berufe-wahl.com
127.0.0.1	berufe-wahl.com
127.0.0.1	www.berufe-welt.de
127.0.0.1	berufe-welt.de
127.0.0.1	www.berufs-wahl.com
127.0.0.1	berufs-wahl.com
127.0.0.1	www.berufs-wahl.de
127.0.0.1	berufs-wahl.de
127.0.0.1	www.beruijindegunhadesun.com
127.0.0.1	beruijindegunhadesun.com
127.0.0.1	www.bescoro.com
127.0.0.1	bescoro.com
127.0.0.1	www.best3xclips.com
127.0.0.1	best3xclips.com
127.0.0.1	www.bestadults.com
127.0.0.1	bestadults.com
127.0.0.1	best-codec.com
127.0.0.1	www.best-codec.com
127.0.0.1	best-counter.com
127.0.0.1	bestcrawler.com
127.0.0.1	www.bestdailyvids.com
127.0.0.1	bestdailyvids.com
127.0.0.1	bestfor.ru
127.0.0.1	bestfuckvids.com
127.0.0.1	www.bestfuckvids.com
127.0.0.1	best-hardpics.com
127.0.0.1	www.bestmanage.org
127.0.0.1	bestmanage.org
127.0.0.1	www.bestmanage0.org
127.0.0.1	bestmanage0.org
127.0.0.1	www.bestmanage1.org
127.0.0.1	bestmanage1.org
127.0.0.1	bestmanage2.org
127.0.0.1	www.bestmanage2.org
127.0.0.1	www.bestmanage3.org
127.0.0.1	bestmanage3.org
127.0.0.1	www.bestmanage4.org
127.0.0.1	bestmanage4.org
127.0.0.1	www.bestmanage5.org
127.0.0.1	bestmanage5.org
127.0.0.1	www.bestmanage6.org
127.0.0.1	bestmanage6.org
127.0.0.1	www.bestmanage7.org
127.0.0.1	bestmanage7.org
127.0.0.1	www.bestmanage8.org
127.0.0.1	bestmanage8.org
127.0.0.1	bestmanage9.org
127.0.0.1	www.bestmanage9.org
127.0.0.1	www.bestmovszone.com
127.0.0.1	bestmovszone.com
127.0.0.1	bestnetwok.net
127.0.0.1	www.bestnetwok.net
127.0.0.1	bestnetwork.net
127.0.0.1	www.bestnetwork.net
127.0.0.1	www.bestoffersnetworks.com
127.0.0.1	bestoffersnetworks.com
127.0.0.1	best-porncollection.com
127.0.0.1	www.best-porncollection.com
127.0.0.1	bestporngate.com
127.0.0.1	bestsafetyguide.net
127.0.0.1	www.bestsafetyguide.net
127.0.0.1	www.bestsearch.cc
127.0.0.1	bestsearch.cc
127.0.0.1	bestsearchworld.info
127.0.0.1	www.bestsearchworld.info
127.0.0.1	www.best-spyware.info
127.0.0.1	best-spyware.info
127.0.0.1	www.best-targeted-traffic.com
127.0.0.1	best-targeted-traffic.com
127.0.0.1	best-voyeur.info
127.0.0.1	www.best-voyeur.info
127.0.0.1	bestweblinks.com
127.0.0.1	best-winning-casino.com
127.0.0.1	www.bestworldgirls-for-u.net
127.0.0.1	bestworldgirls-for-u.net
127.0.0.1	www.bestxclips.com
127.0.0.1	bestxclips.com
127.0.0.1	bestxporno.com
127.0.0.1	www.bestxxxmpegs.com
127.0.0.1	bestxxxmpegs.com
127.0.0.1	www.bettersearch.biz
127.0.0.1	bettersearch.biz
127.0.0.1	www.bewerbo.com
127.0.0.1	bewerbo.com
127.0.0.1	www.bewerbungsexperte.com
127.0.0.1	bewerbungsexperte.com
127.0.0.1	www.bgazzetta.it
127.0.0.1	bgazzetta.it
127.0.0.1	www.bgoogle.it
127.0.0.1	bgoogle.it
127.0.0.1	www.bigcodecadult.com
127.0.0.1	bigcodecadult.com
127.0.0.1	bigcodecadult2008.com
127.0.0.1	www.bigcodecadult2008.com
127.0.0.1	bigcodecadult2008-17.com
127.0.0.1	www.bigcodecadult2008-17.com
127.0.0.1	bighot18adult2008.com
127.0.0.1	www.bighot18adult2008.com
127.0.0.1	www.bighot18-adult2008.com
127.0.0.1	bighot18-adult2008.com
127.0.0.1	www.bighot18codec2008.com
127.0.0.1	bighot18codec2008.com
127.0.0.1	bighot18-codec2008.com
127.0.0.1	www.bighot18-codec2008.com
127.0.0.1	www.bigtrafficnetwork.com
127.0.0.1	bigtrafficnetwork.com
127.0.0.1	www.bigwww.com
127.0.0.1	bigwww.com
127.0.0.1	www.bill.de
127.0.0.1	bill.de
127.0.0.1	bin.errorprotector.com
127.0.0.1	bins.media-motor.net
127.0.0.1	bins2.media-motor.net
127.0.0.1	bis.180solutions.com
127.0.0.1	bitchesonline.net
127.0.0.1	www.bitcomet-freebie.com
127.0.0.1	bitcomet-freebie.com
127.0.0.1	www.bittorrent.click-new-download.com
127.0.0.1	bittorrent.click-new-download.com
127.0.0.1	biz.biz
127.0.0.1	www.bkvcompany.com
127.0.0.1	bkvcompany.com
127.0.0.1	blackblues00.com
127.0.0.1	www.blackblues00.com
127.0.0.1	blackcodec.com
127.0.0.1	www.blackcodec.com
127.0.0.1	www.black-codec.com
127.0.0.1	black-codec.com
127.0.0.1	www.blackcodec.net
127.0.0.1	blackcodec.net
127.0.0.1	www.blackhats.tc
127.0.0.1	blackhats.tc
127.0.0.1	www.blackhawksoftware.com
127.0.0.1	blackhawksoftware.com
127.0.0.1	blackjack-free.net
127.0.0.1	www.blacklegion.info
127.0.0.1	blacklegion.info
127.0.0.1	www.blacktraff.com
127.0.0.1	blacktraff.com
127.0.0.1	blazefind.com
127.0.0.1	blender.xu.pl
127.0.0.1	www.blockcheckercontrol.com
127.0.0.1	blockcheckercontrol.com
127.0.0.1	blondetgp.com
127.0.0.1	www.blue-elefant.com
127.0.0.1	blue-elefant.com
127.0.0.1	www.bm.theaimonline.com
127.0.0.1	bm.theaimonline.com
127.0.0.1	www.bnmgate.com
127.0.0.1	bnmgate.com
127.0.0.1	bodaciousbabette.com
127.0.0.1	www.bonzi.com
127.0.0.1	bonzi.com
127.0.0.1	boobdoll.com
127.0.0.1	boobsandtits.com
127.0.0.1	boobsclub.com
127.0.0.1	www.bookedspace.com
127.0.0.1	bookedspace.com
127.0.0.1	www.boom.com.vn
127.0.0.1	boom.com.vn
127.0.0.1	www.boomgirltv.com
127.0.0.1	boomgirltv.com
127.0.0.1	boredlife.com
127.0.0.1	bowlofogumbo.com
127.0.0.1	www.bpfq02.com
127.0.0.1	bpfq02.com
127.0.0.1	www.bqgate.com
127.0.0.1	bqgate.com
127.0.0.1	br.errorsafe.com
127.0.0.1	br.winantivirus.com
127.0.0.1	br.winfixer.com
127.0.0.1	bradcoem.org
127.0.0.1	www.braincodec.com
127.0.0.1	braincodec.com
127.0.0.1	www.brakecodec.com
127.0.0.1	brakecodec.com
127.0.0.1	www.brakecodec.net
127.0.0.1	brakecodec.net
127.0.0.1	brandiyoung.com
127.0.0.1	www.bravesentry.com
127.0.0.1	bravesentry.com
127.0.0.1	www.breenten.biz
127.0.0.1	breenten.biz
127.0.0.1	www.brodbfm.net
127.0.0.1	brodbfm.net
127.0.0.1	brookeburn.com
127.0.0.1	www.browserwise.com
127.0.0.1	browserwise.com
127.0.0.1	bsa.safetydownload.com
127.0.0.1	www.bsplaycodec.com
127.0.0.1	bsplaycodec.com
127.0.0.1	www.bsplupdate.com
127.0.0.1	bsplupdate.com
127.0.0.1	bucps.com
127.0.0.1	buhartes.info
127.0.0.1	buldog-stats.com
127.0.0.1	www.bullseye-network.com
127.0.0.1	bullseye-network.com
127.0.0.1	www.bundlext.com
127.0.0.1	bundlext.com
127.0.0.1	burgerkingbigscreen.com
127.0.0.1	www.burningsite.com
127.0.0.1	burningsite.com
127.0.0.1	www.burnsrecyclinginc.com
127.0.0.1	burnsrecyclinginc.com
127.0.0.1	buscards.net
127.0.0.1	bustyrussell.com
127.0.0.1	www.busysearch.net
127.0.0.1	busysearch.net
127.0.0.1	buttejazz.org
127.0.0.1	www.buy-find.info
127.0.0.1	buy-find.info
127.0.0.1	buyselldomain.net
127.0.0.1	www.buytraff.biz
127.0.0.1	buytraff.biz
127.0.0.1	buz.ru
127.0.0.1	www.bvdtechinque.com
127.0.0.1	bvdtechinque.com
127.0.0.1	www.bvirgilio.it
127.0.0.1	bvirgilio.it
127.0.0.1	bye-spyware.com
127.0.0.1	www.bye-spyware.com
127.0.0.1	by-fotos.ifrance.com
127.0.0.1	c.centralmedia.ws
127.0.0.1	www.c.enhance.com
127.0.0.1	c.enhance.com
127.0.0.1	c.goclick.com
127.0.0.1	www.c4tdownload.com
127.0.0.1	c4tdownload.com
127.0.0.1	www.c5.www4free.info
127.0.0.1	c5.www4free.info
127.0.0.1	www.cache.surfaccuracy.com
127.0.0.1	cache.surfaccuracy.com
127.0.0.1	cache.ysbweb.com
127.0.0.1	www.cadesfinjeriokas.com
127.0.0.1	cadesfinjeriokas.com
127.0.0.1	calcioturris.com
127.0.0.1	www.calendaralerts.net
127.0.0.1	calendaralerts.net
127.0.0.1	www.callinghome.biz
127.0.0.1	callinghome.biz
127.0.0.1	www.cameouk.co.uk
127.0.0.1	cameouk.co.uk
127.0.0.1	cameup.com
127.0.0.1	www.camouflageclothingonline.net
127.0.0.1	camouflageclothingonline.net
127.0.0.1	campaigns.outerinfo.net
127.0.0.1	www.camping-community.com
127.0.0.1	camping-community.com
127.0.0.1	camup.net
127.0.0.1	canberracricketcoaching.com
127.0.0.1	candycantaloupes.com
127.0.0.1	www.canidetect.org
127.0.0.1	canidetect.org
127.0.0.1	www.cantfind.com
127.0.0.1	cantfind.com
127.0.0.1	careers.dulcineasystems.net
127.0.0.1	carsands.com
127.0.0.1	carsrentals.net
127.0.0.1	cartoes.uol.com.br
127.0.0.1	www.casalemedia.com
127.0.0.1	casalemedia.com
127.0.0.1	www.cashdeluxe.net
127.0.0.1	cashdeluxe.net
127.0.0.1	www.cashengines.com
127.0.0.1	cashengines.com
127.0.0.1	cashsearch.biz
127.0.0.1	www.cashsurfers.com
127.0.0.1	cashsurfers.com
127.0.0.1	www.cashunlim.com
127.0.0.1	cashunlim.com
127.0.0.1	casino.com.free.game.pogo.gratisdownloads.nl
127.0.0.1	casino2win.net
127.0.0.1	casino-gambling-1.net
127.0.0.1	casino-gambling-2.net
127.0.0.1	casinomidas.net
127.0.0.1	casinonline.net
127.0.0.1	casino-onlines.net
127.0.0.1	www.casting.ag
127.0.0.1	casting.ag
127.0.0.1	www.castingsamateur.com
127.0.0.1	castingsamateur.com
127.0.0.1	catallogue.com
127.0.0.1	www.catch-dc.info
127.0.0.1	catch-dc.info
127.0.0.1	categories.mygeek.com
127.0.0.1	catsss.da.ru
127.0.0.1	caxa.ru
127.0.0.1	cazygirls-world.com
127.0.0.1	cc.panet.org
127.0.0.1	www.ccecaedbebfcaf.com
127.0.0.1	ccecaedbebfcaf.com
127.0.0.1	cclebali.org
127.0.0.1	www.ccorriere.it
127.0.0.1	ccorriere.it
127.0.0.1	www.cdcopysite.com
127.0.0.1	cdcopysite.com
127.0.0.1	www.cdegate.com
127.0.0.1	cdegate.com
127.0.0.1	cdn.drivecleaner.com
127.0.0.1	cdn.errorsafe.com
127.0.0.1	cdn.movies-etc.com
127.0.0.1	cdn.winsoftware.com
127.0.0.1	cdn2.movies-etc.com
127.0.0.1	www.cdorriere.it
127.0.0.1	cdorriere.it
127.0.0.1	ceewawires.org
127.0.0.1	centralmedia.ws
127.0.0.1	certumgroup.com
127.0.0.1	www.cforriere.it
127.0.0.1	cforriere.it
127.0.0.1	cheapest.extra.hu
127.0.0.1	check.jupitersatellites.biz
127.0.0.1	www.check.jupitersatellites.biz
127.0.0.1	check-deinen-sex.com
127.0.0.1	www.check-deinen-sex.com
127.0.0.1	www.checkin100.com
127.0.0.1	checkin100.com
127.0.0.1	www.checkssecurity.com
127.0.0.1	checkssecurity.com
127.0.0.1	www.checksystem-online.com
127.0.0.1	checksystem-online.com
127.0.0.1	chelancatering.com
127.0.0.1	www.chenshijituan.com
127.0.0.1	chenshijituan.com
127.0.0.1	childrenvilla.com
127.0.0.1	www.chilly3xvids.com
127.0.0.1	chilly3xvids.com
127.0.0.1	www.chillymovs.com
127.0.0.1	chillymovs.com
127.0.0.1	chips-4-free.com
127.0.0.1	chrisswasey.com
127.0.0.1	chriswallace.net
127.0.0.1	www.cia-trjn.myvnc.com
127.0.0.1	cia-trjn.myvnc.com
127.0.0.1	www.cinemadownload.com
127.0.0.1	cinemadownload.com
127.0.0.1	www.ciorriere.it
127.0.0.1	ciorriere.it
127.0.0.1	www.cirriere.it
127.0.0.1	cirriere.it
127.0.0.1	citycodec.com
127.0.0.1	www.citycodec.com
127.0.0.1	city-codec.com
127.0.0.1	www.city-codec.com
127.0.0.1	ckick4thumbs.com
127.0.0.1	cl55.biz
127.0.0.1	clackamasliteraryreview.com
127.0.0.1	www.clckm.com
127.0.0.1	clckm.com
127.0.0.1	cleancodec.com
127.0.0.1	www.cleancodec.com
127.0.0.1	cleancodec.net
127.0.0.1	www.cleancodec.net
127.0.0.1	www.clean-codec.net
127.0.0.1	clean-codec.net
127.0.0.1	www.cleansoftwares.com
127.0.0.1	cleansoftwares.com
127.0.0.1	clearsearch.cc
127.0.0.1	clearsearch.net
127.0.0.1	clickaire.com
127.0.0.1	www.click-codec.com
127.0.0.1	click-codec.com
127.0.0.1	clickhere4search.com
127.0.0.1	www.clickhere4search.com
127.0.0.1	www.clickkingdom.net
127.0.0.1	clickkingdom.net
127.0.0.1	www.click-new-download.com
127.0.0.1	click-new-download.com
127.0.0.1	click-now.net
127.0.0.1	clickspring.net
127.0.0.1	www.clickspring.net
127.0.0.1	click-to-download.com
127.0.0.1	www.click-to-download.com
127.0.0.1	www.clicktomakeasearch.com
127.0.0.1	clicktomakeasearch.com
127.0.0.1	clickyestoenter.net
127.0.0.1	client.exeupdate.com
127.0.0.1	client.myadultexplorer.com
127.0.0.1	www.cliks.org
127.0.0.1	cliks.org
127.0.0.1	www.cliparts4free.com
127.0.0.1	cliparts4free.com
127.0.0.1	www.clipsfestival.com
127.0.0.1	clipsfestival.com
127.0.0.1	www.clipsreality.com
127.0.0.1	clipsreality.com
127.0.0.1	www.clorriere.it
127.0.0.1	clorriere.it
127.0.0.1	clrsch.com
127.0.0.1	www.clubxxxvideo.com
127.0.0.1	clubxxxvideo.com
127.0.0.1	clusif.free.fr
127.0.0.1	www.cluster.exaserve.net
127.0.0.1	cluster.exaserve.net
127.0.0.1	cmtapestry.com
127.0.0.1	www.cnetadd.com
127.0.0.1	cnetadd.com
127.0.0.1	www.cnomy.com
127.0.0.1	cnomy.com
127.0.0.1	www.cnzz.com
127.0.0.1	cnzz.com
127.0.0.1	www.cocktails-heute.com
127.0.0.1	cocktails-heute.com
127.0.0.1	www.cocktails-ideen.de
127.0.0.1	cocktails-ideen.de
127.0.0.1	www.cocktails-rezepte.net
127.0.0.1	cocktails-rezepte.net
127.0.0.1	code.ignphrases.com
127.0.0.1	codec.ninoa.com
127.0.0.1	codecadult18.com
127.0.0.1	www.codecadult18.com
127.0.0.1	codecbest.com
127.0.0.1	www.codecbest.com
127.0.0.1	codecbsplay.com
127.0.0.1	www.codecbsplay.com
127.0.0.1	www.codecdemo.com
127.0.0.1	codecdemo.com
127.0.0.1	codecdvd.net
127.0.0.1	www.codecdvd.net
127.0.0.1	www.codecdvi.com
127.0.0.1	codecdvi.com
127.0.0.1	codec-fun.com
127.0.0.1	www.codec-fun.com
127.0.0.1	www.codechard.com
127.0.0.1	codechard.com
127.0.0.1	www.codechot.net
127.0.0.1	codechot.net
127.0.0.1	www.codechq.net
127.0.0.1	codechq.net
127.0.0.1	www.codecmeg.net
127.0.0.1	codecmeg.net
127.0.0.1	www.codecmega.com
127.0.0.1	codecmega.com
127.0.0.1	www.codecmega.net
127.0.0.1	codecmega.net
127.0.0.1	www.codecmoon.com
127.0.0.1	codecmoon.com
127.0.0.1	www.codecmpg.com
127.0.0.1	codecmpg.com
127.0.0.1	www.codecnice.net
127.0.0.1	codecnice.net
127.0.0.1	www.codecnitro.com
127.0.0.1	codecnitro.com
127.0.0.1	www.codecops.net
127.0.0.1	codecops.net
127.0.0.1	www.codecplay.com
127.0.0.1	codecplay.com
127.0.0.1	www.codecpretty.net
127.0.0.1	codecpretty.net
127.0.0.1	www.codecpro.net
127.0.0.1	codecpro.net
127.0.0.1	www.codecred.net
127.0.0.1	codecred.net
127.0.0.1	www.codecsoft.net
127.0.0.1	codecsoft.net
127.0.0.1	www.codecthe.com
127.0.0.1	codecthe.com
127.0.0.1	www.codectime.com
127.0.0.1	codectime.com
127.0.0.1	www.codecultra.net
127.0.0.1	codecultra.net
127.0.0.1	www.codecvids.com
127.0.0.1	codecvids.com
127.0.0.1	www.codecvip.com
127.0.0.1	codecvip.com
127.0.0.1	www.codecviva.com
127.0.0.1	codecviva.com
127.0.0.1	www.codeczang.net
127.0.0.1	codeczang.net
127.0.0.1	www.codrriere.it
127.0.0.1	codrriere.it
127.0.0.1	www.coeriere.it
127.0.0.1	coeriere.it
127.0.0.1	www.coerriere.it
127.0.0.1	coerriere.it
127.0.0.1	www.cofrriere.it
127.0.0.1	cofrriere.it
127.0.0.1	www.cogrriere.it
127.0.0.1	cogrriere.it
127.0.0.1	www.coirriere.it
127.0.0.1	coirriere.it
127.0.0.1	www.com-com.ws
127.0.0.1	com-com.ws
127.0.0.1	www.comissur.com
127.0.0.1	comissur.com
127.0.0.1	command.adservs.com
127.0.0.1	www.commonname.com
127.0.0.1	commonname.com
127.0.0.1	www.comparespywareremover.org
127.0.0.1	comparespywareremover.org
127.0.0.1	www.computerpcgames.net
127.0.0.1	computerpcgames.net
127.0.0.1	www.computerrecover.com
127.0.0.1	computerrecover.com
127.0.0.1	www.condome.tv
127.0.0.1	condome.tv
127.0.0.1	config.180solutions.com
127.0.0.1	www.congtouzailai.net
127.0.0.1	congtouzailai.net
127.0.0.1	www.consumers-reviews.net
127.0.0.1	consumers-reviews.net
127.0.0.1	www.content.dollarrevenue.com
127.0.0.1	content.dollarrevenue.com
127.0.0.1	www.content.ireit.com
127.0.0.1	content.ireit.com
127.0.0.1	content.onerateld.com
127.0.0.1	www.contentmatch.net
127.0.0.1	contentmatch.net
127.0.0.1	www.contextplus.net
127.0.0.1	contextplus.net
127.0.0.1	www.contra-virus.com
127.0.0.1	contra-virus.com
127.0.0.1	www.controlmeh.com
127.0.0.1	controlmeh.com
127.0.0.1	www.controlpage.info
127.0.0.1	controlpage.info
127.0.0.1	www.convenient-search.com
127.0.0.1	convenient-search.com
127.0.0.1	www.cookingluck.com
127.0.0.1	cookingluck.com
127.0.0.1	www.cooldeskalert.com
127.0.0.1	cooldeskalert.com
127.0.0.1	www.coole-tattoos.de
127.0.0.1	coole-tattoos.de
127.0.0.1	coolfetishsite.com
127.0.0.1	coolfreehost.com
127.0.0.1	coolfreepage.com
127.0.0.1	coolfreepages.com
127.0.0.1	cool-homepage.co
127.0.0.1	cool-homepage.com
127.0.0.1	coolmoneysearch.com
127.0.0.1	coolonlinebusiness.com
127.0.0.1	www.coolonlinebusiness.com
127.0.0.1	coolpornsearch.com
127.0.0.1	cool-search.net
127.0.0.1	cool-search.netfartpost.com
127.0.0.1	coolsearcher.info
127.0.0.1	www.coolservecorp.net
127.0.0.1	coolservecorp.net
127.0.0.1	coolwebsearch.com
127.0.0.1	www.coolwebsearch.com
127.0.0.1	cool-web-search.com
127.0.0.1	coolwebsearsh.com
127.0.0.1	coolwwwsearch.com
127.0.0.1	www.coolwwwsearch.com
127.0.0.1	cool-xxx.net
127.0.0.1	www.coorriere.it
127.0.0.1	coorriere.it
127.0.0.1	copmtraine.com
127.0.0.1	www.coprriere.it
127.0.0.1	coprriere.it
127.0.0.1	www.core.psyche-evolution.com
127.0.0.1	core.psyche-evolution.com
127.0.0.1	www.coreiere.it
127.0.0.1	coreiere.it
127.0.0.1	www.coreriere.it
127.0.0.1	coreriere.it
127.0.0.1	www.corrdiere.it
127.0.0.1	corrdiere.it
127.0.0.1	www.correiere.it
127.0.0.1	correiere.it
127.0.0.1	www.corrfiere.it
127.0.0.1	corrfiere.it
127.0.0.1	www.corrgiere.it
127.0.0.1	corrgiere.it
127.0.0.1	www.corridere.it
127.0.0.1	corridere.it
127.0.0.1	www.corriedre.it
127.0.0.1	corriedre.it
127.0.0.1	www.corriee.it
127.0.0.1	corriee.it
127.0.0.1	www.corrieere.it
127.0.0.1	corrieere.it
127.0.0.1	www.corriefre.it
127.0.0.1	corriefre.it
127.0.0.1	www.corriegre.it
127.0.0.1	corriegre.it
127.0.0.1	www.corrierde.it
127.0.0.1	corrierde.it
127.0.0.1	www.corriered.it
127.0.0.1	corriered.it
127.0.0.1	www.corrieree.it
127.0.0.1	corrieree.it
127.0.0.1	www.corrieref.it
127.0.0.1	corrieref.it
127.0.0.1	www.corrierer.it
127.0.0.1	corrierer.it
127.0.0.1	www.corrieres.it
127.0.0.1	corrieres.it
127.0.0.1	www.corrierew.it
127.0.0.1	corrierew.it
127.0.0.1	www.corrierfe.it
127.0.0.1	corrierfe.it
127.0.0.1	www.corrierge.it
127.0.0.1	corrierge.it
127.0.0.1	www.corrierr.it
127.0.0.1	corrierr.it
127.0.0.1	www.corrierre.it
127.0.0.1	corrierre.it
127.0.0.1	www.corrierse.it
127.0.0.1	corrierse.it
127.0.0.1	www.corrierte.it
127.0.0.1	corrierte.it
127.0.0.1	www.corrierw.it
127.0.0.1	corrierw.it
127.0.0.1	www.corrierwe.it
127.0.0.1	corrierwe.it
127.0.0.1	www.corriesre.it
127.0.0.1	corriesre.it
127.0.0.1	www.corriete.it
127.0.0.1	corriete.it
127.0.0.1	www.corrietre.it
127.0.0.1	corrietre.it
127.0.0.1	www.corriewre.it
127.0.0.1	corriewre.it
127.0.0.1	www.corrifere.it
127.0.0.1	corrifere.it
127.0.0.1	www.corriiere.it
127.0.0.1	corriiere.it
127.0.0.1	www.corrilere.it
127.0.0.1	corrilere.it
127.0.0.1	www.corrioere.it
127.0.0.1	corrioere.it
127.0.0.1	www.corrire.it
127.0.0.1	corrire.it
127.0.0.1	www.corrirere.it
127.0.0.1	corrirere.it
127.0.0.1	www.corrirre.it
127.0.0.1	corrirre.it
127.0.0.1	www.corrisere.it
127.0.0.1	corrisere.it
127.0.0.1	www.corriuere.it
127.0.0.1	corriuere.it
127.0.0.1	www.corriwere.it
127.0.0.1	corriwere.it
127.0.0.1	www.corriwre.it
127.0.0.1	corriwre.it
127.0.0.1	www.corrliere.it
127.0.0.1	corrliere.it
127.0.0.1	www.corroere.it
127.0.0.1	corroere.it
127.0.0.1	www.corroiere.it
127.0.0.1	corroiere.it
127.0.0.1	www.corrriere.it
127.0.0.1	corrriere.it
127.0.0.1	www.corrtiere.it
127.0.0.1	corrtiere.it
127.0.0.1	www.corruere.it
127.0.0.1	corruere.it
127.0.0.1	www.corruiere.it
127.0.0.1	corruiere.it
127.0.0.1	www.cortiere.it
127.0.0.1	cortiere.it
127.0.0.1	www.cortriere.it
127.0.0.1	cortriere.it
127.0.0.1	www.costrike.com
127.0.0.1	costrike.com
127.0.0.1	www.cotriere.it
127.0.0.1	cotriere.it
127.0.0.1	www.cotrriere.it
127.0.0.1	cotrriere.it
127.0.0.1	couldnotfind.com
127.0.0.1	count.cc
127.0.0.1	count.hitscount.net
127.0.0.1	count-all.com
127.0.0.1	www.countdutycall.info
127.0.0.1	countdutycall.info
127.0.0.1	counter.sexmaniack.com
127.0.0.1	www.courtrecordslookup.com
127.0.0.1	courtrecordslookup.com
127.0.0.1	www.cporriere.it
127.0.0.1	cporriere.it
127.0.0.1	www.cprriere.it
127.0.0.1	cprriere.it
127.0.0.1	cpvfeed.com
127.0.0.1	cracks.me.uk
127.0.0.1	www.cracks4all.com
127.0.0.1	cracks4all.com
127.0.0.1	www.crapsgold.info
127.0.0.1	crapsgold.info
127.0.0.1	www.crazygirls-world.com
127.0.0.1	crazygirls-world.com
127.0.0.1	www.crazywinnings.com
127.0.0.1	crazywinnings.com
127.0.0.1	creamedcutties.com
127.0.0.1	www.createaccesskey.com
127.0.0.1	createaccesskey.com
127.0.0.1	www.creatonsoft.com
127.0.0.1	creatonsoft.com
127.0.0.1	creditsearchonline.com
127.0.0.1	crestring.com
127.0.0.1	c

alexsofa · Answer

rojanskiller.com
127.0.0.1	trojanskiller.com
127.0.0.1	www.troonety.biz
127.0.0.1	troonety.biz
127.0.0.1	www.trossoalice.it
127.0.0.1	trossoalice.it
127.0.0.1	www.trrenitalia.it
127.0.0.1	trrenitalia.it
127.0.0.1	www.trtenitalia.it
127.0.0.1	trtenitalia.it
127.0.0.1	truecodec.com
127.0.0.1	www.truecodec.com
127.0.0.1	true-counter.com
127.0.0.1	www.true-counter.com
127.0.0.1	true-portal.com
127.0.0.1	www.trustedantivirus.com
127.0.0.1	trustedantivirus.com
127.0.0.1	www.trustedprotection.com
127.0.0.1	trustedprotection.com
127.0.0.1	www.truth-is-out-there.org
127.0.0.1	truth-is-out-there.org
127.0.0.1	www.truttogratis.it
127.0.0.1	truttogratis.it
127.0.0.1	trytechnical.com
127.0.0.1	www.tscali.it
127.0.0.1	tscali.it
127.0.0.1	www.tscodec.com
127.0.0.1	tscodec.com
127.0.0.1	www.tsmfirm.com
127.0.0.1	tsmfirm.com
127.0.0.1	tsx.org
127.0.0.1	www.ttiscali.it
127.0.0.1	ttiscali.it
127.0.0.1	www.ttrenitalia.it
127.0.0.1	ttrenitalia.it
127.0.0.1	www.tttogratis.it
127.0.0.1	tttogratis.it
127.0.0.1	www.ttuttogratis.it
127.0.0.1	ttuttogratis.it
127.0.0.1	www.tuiscali.it
127.0.0.1	tuiscali.it
127.0.0.1	www.tuksolution.com
127.0.0.1	tuksolution.com
127.0.0.1	www.turbocodec.com
127.0.0.1	turbocodec.com
127.0.0.1	turbo-codec.com
127.0.0.1	www.turbo-codec.com
127.0.0.1	www.turbocodec.net
127.0.0.1	turbocodec.net
127.0.0.1	www.turismoaq.it
127.0.0.1	turismoaq.it
127.0.0.1	www.turtogratis.it
127.0.0.1	turtogratis.it
127.0.0.1	www.tutogratis.it
127.0.0.1	tutogratis.it
127.0.0.1	www.tutorial-hq.com
127.0.0.1	tutorial-hq.com
127.0.0.1	www.tutrogratis.it
127.0.0.1	tutrogratis.it
127.0.0.1	www.tuttgratis.it
127.0.0.1	tuttgratis.it
127.0.0.1	www.tuttoavolonta.com
127.0.0.1	tuttoavolonta.com
127.0.0.1	www.tuttofratis.it
127.0.0.1	tuttofratis.it
127.0.0.1	www.tuttogeratis.it
127.0.0.1	tuttogeratis.it
127.0.0.1	www.tuttograatis.it
127.0.0.1	tuttograatis.it
127.0.0.1	www.tuttograis.it
127.0.0.1	tuttograis.it
127.0.0.1	www.tuttograris.it
127.0.0.1	tuttograris.it
127.0.0.1	www.tuttograti.it
127.0.0.1	tuttograti.it
127.0.0.1	www.tuttogratia.it
127.0.0.1	tuttogratia.it
127.0.0.1	www.tuttogratias.it
127.0.0.1	tuttogratias.it
127.0.0.1	www.tuttogratiis.it
127.0.0.1	tuttogratiis.it
127.0.0.1	www.tuttogratisa.it
127.0.0.1	tuttogratisa.it
127.0.0.1	www.tuttogratiss.it
127.0.0.1	tuttogratiss.it
127.0.0.1	www.tuttogratos.it
127.0.0.1	tuttogratos.it
127.0.0.1	www.tuttograts.it
127.0.0.1	tuttograts.it
127.0.0.1	www.tuttograttis.it
127.0.0.1	tuttograttis.it
127.0.0.1	www.tuttogratus.it
127.0.0.1	tuttogratus.it
127.0.0.1	www.tuttograyis.it
127.0.0.1	tuttograyis.it
127.0.0.1	www.tuttogrratis.it
127.0.0.1	tuttogrratis.it
127.0.0.1	www.tuttogrstis.it
127.0.0.1	tuttogrstis.it
127.0.0.1	www.tuttogrtatis.it
127.0.0.1	tuttogrtatis.it
127.0.0.1	www.tuttogtratis.it
127.0.0.1	tuttogtratis.it
127.0.0.1	www.tuttohratis.it
127.0.0.1	tuttohratis.it
127.0.0.1	www.tuttoigratis.it
127.0.0.1	tuttoigratis.it
127.0.0.1	www.tuttoogratis.it
127.0.0.1	tuttoogratis.it
127.0.0.1	www.tuttopgratis.it
127.0.0.1	tuttopgratis.it
127.0.0.1	www.tuttoratis.it
127.0.0.1	tuttoratis.it
127.0.0.1	www.tuttpgratis.it
127.0.0.1	tuttpgratis.it
127.0.0.1	www.tutttogratis.it
127.0.0.1	tutttogratis.it
127.0.0.1	www.tuttyogratis.it
127.0.0.1	tuttyogratis.it
127.0.0.1	www.tutyogratis.it
127.0.0.1	tutyogratis.it
127.0.0.1	www.tutytogratis.it
127.0.0.1	tutytogratis.it
127.0.0.1	www.tuuttogratis.it
127.0.0.1	tuuttogratis.it
127.0.0.1	www.tuvcompany.com
127.0.0.1	tuvcompany.com
127.0.0.1	www.tuytogratis.it
127.0.0.1	tuytogratis.it
127.0.0.1	tv.180solutions.com
127.0.0.1	tvadvanced.com
127.0.0.1	www.tvadvanced.com
127.0.0.1	tv-auf-dem-pc.de
127.0.0.1	www.tv-auf-dem-pc.de
127.0.0.1	www.tvcodec.com
127.0.0.1	tvcodec.com
127.0.0.1	www.tv-codec.com
127.0.0.1	tv-codec.com
127.0.0.1	www.tv-codecs.com
127.0.0.1	tv-codecs.com
127.0.0.1	tv-en-pc.es
127.0.0.1	www.tv-en-pc.es
127.0.0.1	www.tvgewinner.com
127.0.0.1	tvgewinner.com
127.0.0.1	tvnowsite.com
127.0.0.1	www.tvnowsite.com
127.0.0.1	www.tv-project.de
127.0.0.1	tv-project.de
127.0.0.1	www.tvsatellitepourpc.com
127.0.0.1	tvsatellitepourpc.com
127.0.0.1	www.tvscodec.com
127.0.0.1	tvscodec.com
127.0.0.1	www.tvshowcollection.com
127.0.0.1	tvshowcollection.com
127.0.0.1	www.tv-sur-pc.com
127.0.0.1	tv-sur-pc.com
127.0.0.1	www.tw7890.com
127.0.0.1	tw7890.com
127.0.0.1	www.two4ew.com
127.0.0.1	two4ew.com
127.0.0.1	www.tyiscali.it
127.0.0.1	tyiscali.it
127.0.0.1	www.type2find.com
127.0.0.1	type2find.com
127.0.0.1	www.tyttogratis.it
127.0.0.1	tyttogratis.it
127.0.0.1	www.tzxsj.com
127.0.0.1	tzxsj.com
127.0.0.1	u.webbuying.net
127.0.0.1	u-239.com
127.0.0.1	u45.cx
127.0.0.1	u46.cx
127.0.0.1	u47.cc
127.0.0.1	u48.cc
127.0.0.1	www.u7u.cn
127.0.0.1	u7u.cn
127.0.0.1	www.uav2008.com
127.0.0.1	uav2008.com
127.0.0.1	www.uc8010.com
127.0.0.1	uc8010.com
127.0.0.1	www.ucleaner.com
127.0.0.1	ucleaner.com
127.0.0.1	www.ucmal.com
127.0.0.1	ucmal.com
127.0.0.1	ucmore.com
127.0.0.1	www.udefender.com
127.0.0.1	udefender.com
127.0.0.1	www.ueornaaqada.com
127.0.0.1	ueornaaqada.com
127.0.0.1	www.ueornavxiz.biz
127.0.0.1	ueornavxiz.biz
127.0.0.1	ueornmbkkhmf.biz
127.0.0.1	www.ueornmbkkhmf.biz
127.0.0.1	ueorn-rsztriv.com
127.0.0.1	www.ueorn-rsztriv.com
127.0.0.1	ueorn-vtvcp.com
127.0.0.1	www.ueorn-vtvcp.com
127.0.0.1	www.ueornygco.com
127.0.0.1	ueornygco.com
127.0.0.1	www.ueornymct.com
127.0.0.1	ueornymct.com
127.0.0.1	ufindall.click-now.net
127.0.0.1	www.ufixer.com
127.0.0.1	ufixer.com
127.0.0.1	www.uglyphotos.net
127.0.0.1	uglyphotos.net
127.0.0.1	www.uibo.it
127.0.0.1	uibo.it
127.0.0.1	www.uige.it
127.0.0.1	uige.it
127.0.0.1	www.uimi.it
127.0.0.1	uimi.it
127.0.0.1	www.uincodec.com
127.0.0.1	uincodec.com
127.0.0.1	www.uinimi.it
127.0.0.1	uinimi.it
127.0.0.1	www.uipd.it
127.0.0.1	uipd.it
127.0.0.1	www.uipg.it
127.0.0.1	uipg.it
127.0.0.1	www.uito.it
127.0.0.1	uito.it
127.0.0.1	www.ukiee.com
127.0.0.1	ukiee.com
127.0.0.1	ulink13.dudu.com
127.0.0.1	ulink7.dudu.com
127.0.0.1	ulog.systemdoctor.com
127.0.0.1	ulog.winantivirus.com
127.0.0.1	ultimatemp3player.com
127.0.0.1	www.ultimatemp3player.com
127.0.0.1	ultimateprotect.com
127.0.0.1	www.ultimatevideosite.com
127.0.0.1	ultimatevideosite.com
127.0.0.1	ultimat-portal.de
127.0.0.1	www.ultimat-portal.de
127.0.0.1	ultracodec.com
127.0.0.1	www.ultracodec.com
127.0.0.1	ultra-codec.com
127.0.0.1	www.ultra-codec.com
127.0.0.1	www.ultracodec.net
127.0.0.1	ultracodec.net
127.0.0.1	www.ultrahqcodec.com
127.0.0.1	ultrahqcodec.com
127.0.0.1	ultraload.net
127.0.0.1	umaxsearch.com
127.0.0.1	www.umfragenagent.com
127.0.0.1	umfragenagent.com
127.0.0.1	www.umfragendatenbank.net
127.0.0.1	umfragendatenbank.net
127.0.0.1	umfragen-einladung.com
127.0.0.1	www.umfragen-einladung.com
127.0.0.1	www.umfragenscout.com
127.0.0.1	umfragenscout.com
127.0.0.1	www.umibo.it
127.0.0.1	umibo.it
127.0.0.1	www.umige.it
127.0.0.1	umige.it
127.0.0.1	www.umimi.it
127.0.0.1	umimi.it
127.0.0.1	www.umipd.it
127.0.0.1	umipd.it
127.0.0.1	www.umipv.it
127.0.0.1	umipv.it
127.0.0.1	www.umnibo.it
127.0.0.1	umnibo.it
127.0.0.1	www.unbo.it
127.0.0.1	unbo.it
127.0.0.1	www.uncj.filetretporn.com
127.0.0.1	uncj.filetretporn.com
127.0.0.1	underagehost.com
127.0.0.1	une-autre-france.com
127.0.0.1	www.unge.it
127.0.0.1	unge.it
127.0.0.1	www.unibno.it
127.0.0.1	unibno.it
127.0.0.1	www.unie.it
127.0.0.1	unie.it
127.0.0.1	www.uniformpornmag.com
127.0.0.1	uniformpornmag.com
127.0.0.1	www.unig.it
127.0.0.1	unig.it
127.0.0.1	unigays.com
127.0.0.1	www.unihomepg.com
127.0.0.1	unihomepg.com
127.0.0.1	www.unii.it
127.0.0.1	unii.it
127.0.0.1	www.unini.it
127.0.0.1	unini.it
127.0.0.1	www.unionseek.com
127.0.0.1	unionseek.com
127.0.0.1	www.unionsms.net
127.0.0.1	unionsms.net
127.0.0.1	unipages.cc
127.0.0.1	www.unitedreporters.org
127.0.0.1	unitedreporters.org
127.0.0.1	unitedstates.rub.to
127.0.0.1	www.univo.it
127.0.0.1	univo.it
127.0.0.1	www.unknownip.com
127.0.0.1	unknownip.com
127.0.0.1	www.unlimite.net
127.0.0.1	unlimite.net
127.0.0.1	www.unlimitedmp3downloads.com
127.0.0.1	unlimitedmp3downloads.com
127.0.0.1	www.unlimitedtvshowdownload.com
127.0.0.1	unlimitedtvshowdownload.com
127.0.0.1	www.unmi.it
127.0.0.1	unmi.it
127.0.0.1	www.unmibo.it
127.0.0.1	unmibo.it
127.0.0.1	www.unobo.it
127.0.0.1	unobo.it
127.0.0.1	www.unpd.it
127.0.0.1	unpd.it
127.0.0.1	www.unpg.it
127.0.0.1	unpg.it
127.0.0.1	www.unto.it
127.0.0.1	unto.it
127.0.0.1	www.unubo.it
127.0.0.1	unubo.it
127.0.0.1	up2you.ru
127.0.0.1	upd.lop.com
127.0.0.1	upd.zone-media.com
127.0.0.1	update.680180.net
127.0.0.1	update.shareaza.com
127.0.0.1	www.updatemysettings.com
127.0.0.1	updatemysettings.com
127.0.0.1	updates.spywarequake.com
127.0.0.1	www.updatesantivirus.com
127.0.0.1	updatesantivirus.com
127.0.0.1	www.upereva.it
127.0.0.1	upereva.it
127.0.0.1	www.upgrade-soft-ware-now.com
127.0.0.1	upgrade-soft-ware-now.com
127.0.0.1	uploads.180solutions.com
127.0.0.1	www.upspiral.com
127.0.0.1	upspiral.com
127.0.0.1	www.uptodateprotect.com
127.0.0.1	uptodateprotect.com
127.0.0.1	www.uptodatesecurity.com
127.0.0.1	uptodatesecurity.com
127.0.0.1	www.uptofind.com
127.0.0.1	uptofind.com
127.0.0.1	upx.tsx.org
127.0.0.1	uralitel.ru
127.0.0.1	www.urgentsystemupdate.biz
127.0.0.1	urgentsystemupdate.biz
127.0.0.1	www.urgentsystemupdate.com
127.0.0.1	urgentsystemupdate.com
127.0.0.1	www.url.adtrgt.com
127.0.0.1	url.adtrgt.com
127.0.0.1	www.url.cpvfeed.com
127.0.0.1	url.cpvfeed.com
127.0.0.1	urlstat.com
127.0.0.1	urlstat.ru
127.0.0.1	ursie.net
127.0.0.1	usecodec.com
127.0.0.1	www.usecodec.com
127.0.0.1	usefullsoft.net
127.0.0.1	www.usefulwebtool.info
127.0.0.1	usefulwebtool.info
127.0.0.1	use-play.com
127.0.0.1	www.use-play.com
127.0.0.1	user1.12-26.net
127.0.0.1	user1.12-27.net
127.0.0.1	user1.isee080.net
127.0.0.1	utahsweet.com
127.0.0.1	www.utiledeprotection.com
127.0.0.1	utiledeprotection.com
127.0.0.1	utils.errorsafe.com
127.0.0.1	utils.winantivirus.com
127.0.0.1	www.utils.winfixer.com
127.0.0.1	utils.winfixer.com
127.0.0.1	utopicportal.com
127.0.0.1	uusocialjustice.org
127.0.0.1	www.uvu-channel.com
127.0.0.1	uvu-channel.com
127.0.0.1	www.uwan2.com
127.0.0.1	uwan2.com
127.0.0.1	www.uydsiygeds.com
127.0.0.1	uydsiygeds.com
127.0.0.1	www.uzoogle.com
127.0.0.1	uzoogle.com
127.0.0.1	www.uzupa.com
127.0.0.1	uzupa.com
127.0.0.1	v-224.com
127.0.0.1	www.v61.com
127.0.0.1	v61.com
127.0.0.1	www.v8irgilio.it
127.0.0.1	v8irgilio.it
127.0.0.1	www.v8rgilio.it
127.0.0.1	v8rgilio.it
127.0.0.1	www.v9irgilio.it
127.0.0.1	v9irgilio.it
127.0.0.1	www.v9rgilio.it
127.0.0.1	v9rgilio.it
127.0.0.1	www.vac-soft.com
127.0.0.1	vac-soft.com
127.0.0.1	www.vacwebsoft.com
127.0.0.1	vacwebsoft.com
127.0.0.1	www.vadesrunhdefunnjansdeikin.com
127.0.0.1	vadesrunhdefunnjansdeikin.com
127.0.0.1	vaginpics.com
127.0.0.1	valmyers.com
127.0.0.1	www.vapochille.com
127.0.0.1	vapochille.com
127.0.0.1	www.vaserjungenfujinas.com
127.0.0.1	vaserjungenfujinas.com
127.0.0.1	www.vaulimited.com
127.0.0.1	vaulimited.com
127.0.0.1	www.vaxcodec.com
127.0.0.1	vaxcodec.com
127.0.0.1	www.vaxdownload.com
127.0.0.1	vaxdownload.com
127.0.0.1	www.vaxobject.com
127.0.0.1	vaxobject.com
127.0.0.1	www.vaxobjectinstall.com
127.0.0.1	vaxobjectinstall.com
127.0.0.1	www.vbirgilio.it
127.0.0.1	vbirgilio.it
127.0.0.1	www.vbrstream.com
127.0.0.1	vbrstream.com
127.0.0.1	www.vcirgilio.it
127.0.0.1	vcirgilio.it
127.0.0.1	www.vcodec.com
127.0.0.1	vcodec.com
127.0.0.1	v-codec.com
127.0.0.1	www.v-codec.com
127.0.0.1	www.vcodec2007.com
127.0.0.1	vcodec2007.com
127.0.0.1	www.vcorriere.it
127.0.0.1	vcorriere.it
127.0.0.1	www.vegaseastcasino.com
127.0.0.1	vegaseastcasino.com
127.0.0.1	vegas-free.com
127.0.0.1	vegbuy.com
127.0.0.1	veloventures.com
127.0.0.1	verkaufen.wegvonviren.com
127.0.0.1	www.verkehrsprofi.com
127.0.0.1	verkehrsprofi.com
127.0.0.1	www.vertionkinhunfenrunhasde.com
127.0.0.1	vertionkinhunfenrunhasde.com
127.0.0.1	www.verwandschafts-test.de
127.0.0.1	verwandschafts-test.de
127.0.0.1	veryeasysearch.com
127.0.0.1	verzila.com
127.0.0.1	vesbiz.biz
127.0.0.1	www.veyyhlucwa.net
127.0.0.1	veyyhlucwa.net
127.0.0.1	www.vfirgilio.it
127.0.0.1	vfirgilio.it
127.0.0.1	www.vgazzetta.it
127.0.0.1	vgazzetta.it
127.0.0.1	www.vgirgilio.it
127.0.0.1	vgirgilio.it
127.0.0.1	www.vgoogle.it
127.0.0.1	vgoogle.it
127.0.0.1	www.vi4gilio.it
127.0.0.1	vi4gilio.it
127.0.0.1	www.vi4rgilio.it
127.0.0.1	vi4rgilio.it
127.0.0.1	www.vi5gilio.it
127.0.0.1	vi5gilio.it
127.0.0.1	www.vi5rgilio.it
127.0.0.1	vi5rgilio.it
127.0.0.1	www.vi8rgilio.it
127.0.0.1	vi8rgilio.it
127.0.0.1	www.vi9rgilio.it
127.0.0.1	vi9rgilio.it
127.0.0.1	www.viaccelerator.com
127.0.0.1	viaccelerator.com
127.0.0.1	www.vicodec.com
127.0.0.1	vicodec.com
127.0.0.1	victoriaadam.com
127.0.0.1	www.vidaccess.net
127.0.0.1	vidaccess.net
127.0.0.1	www.vidcodecs.com
127.0.0.1	vidcodecs.com
127.0.0.1	www.videoaccessactivex.com
127.0.0.1	videoaccessactivex.com
127.0.0.1	www.videoactivexlist.com
127.0.0.1	videoactivexlist.com
127.0.0.1	www.videoactivexmode.com
127.0.0.1	videoactivexmode.com
127.0.0.1	www.videoactivexnote.com
127.0.0.1	videoactivexnote.com
127.0.0.1	www.videoactivexsetup.com
127.0.0.1	videoactivexsetup.com
127.0.0.1	www.videoactivexsoft.com
127.0.0.1	videoactivexsoft.com
127.0.0.1	www.videoactivexsoftware.com
127.0.0.1	videoactivexsoftware.com
127.0.0.1	www.videoadaptation.com
127.0.0.1	videoadaptation.com
127.0.0.1	www.videoaxdata.com
127.0.0.1	videoaxdata.com
127.0.0.1	www.videoaxdownload.com
127.0.0.1	videoaxdownload.com
127.0.0.1	www.videoaxobject.com
127.0.0.1	videoaxobject.com
127.0.0.1	www.videoaxproject.com
127.0.0.1	videoaxproject.com
127.0.0.1	www.videoaxsoftware.com
127.0.0.1	videoaxsoftware.com
127.0.0.1	www.videoaxsolution.com
127.0.0.1	videoaxsolution.com
127.0.0.1	videocategories.com
127.0.0.1	video-clips.in
127.0.0.1	www.video-clips.in
127.0.0.1	www.videoexternal.com
127.0.0.1	videoexternal.com
127.0.0.1	www.videoobjectax.com
127.0.0.1	videoobjectax.com
127.0.0.1	www.videoobjectmedia.com
127.0.0.1	videoobjectmedia.com
127.0.0.1	www.videoplayersite.com
127.0.0.1	videoplayersite.com
127.0.0.1	www.videos-access.com
127.0.0.1	videos-access.com
127.0.0.1	www.videosaccess.net
127.0.0.1	videosaccess.net
127.0.0.1	www.videoscodec.com
127.0.0.1	videoscodec.com
127.0.0.1	www.videosfan.com
127.0.0.1	videosfan.com
127.0.0.1	www.videosoftonline.com
127.0.0.1	videosoftonline.com
127.0.0.1	www.videosoftwareax.com
127.0.0.1	videosoftwareax.com
127.0.0.1	www.videossoftware.com
127.0.0.1	videossoftware.com
127.0.0.1	www.videowebproject.com
127.0.0.1	videowebproject.com
127.0.0.1	www.videowebsoft.com
127.0.0.1	videowebsoft.com
127.0.0.1	www.videozapping.com
127.0.0.1	videozapping.com
127.0.0.1	www.vidrgilio.it
127.0.0.1	vidrgilio.it
127.0.0.1	www.vids-access.com
127.0.0.1	vids-access.com
127.0.0.1	www.vidscodec.com
127.0.0.1	vidscodec.com
127.0.0.1	www.vidsfest.com
127.0.0.1	vidsfest.com
127.0.0.1	www.viegilio.it
127.0.0.1	viegilio.it
127.0.0.1	www.viergilio.it
127.0.0.1	viergilio.it
127.0.0.1	www.viewdevice.com
127.0.0.1	viewdevice.com
127.0.0.1	www.viewimageonline.com
127.0.0.1	viewimageonline.com
127.0.0.1	www.viewmpgdevice.com
127.0.0.1	viewmpgdevice.com
127.0.0.1	www.viewutility.com
127.0.0.1	viewutility.com
127.0.0.1	www.vifgilio.it
127.0.0.1	vifgilio.it
127.0.0.1	www.vifrgilio.it
127.0.0.1	vifrgilio.it
127.0.0.1	www.vigrgilio.it
127.0.0.1	vigrgilio.it
127.0.0.1	www.vigrilio.it
127.0.0.1	vigrilio.it
127.0.0.1	www.vijrgilio.it
127.0.0.1	vijrgilio.it
127.0.0.1	www.vikrgilio.it
127.0.0.1	vikrgilio.it
127.0.0.1	www.vilrgilio.it
127.0.0.1	vilrgilio.it
127.0.0.1	www.viorgilio.it
127.0.0.1	viorgilio.it
127.0.0.1	www.vipcodec.net
127.0.0.1	vipcodec.net
127.0.0.1	www.vipcodecvip.com
127.0.0.1	vipcodecvip.com
127.0.0.1	www.viplifeplaying.net
127.0.0.1	viplifeplaying.net
127.0.0.1	www.vipru.com
127.0.0.1	vipru.com
127.0.0.1	www.vipzonegaming.com
127.0.0.1	vipzonegaming.com
127.0.0.1	www.vir4gilio.it
127.0.0.1	vir4gilio.it
127.0.0.1	www.vir5gilio.it
127.0.0.1	vir5gilio.it
127.0.0.1	www.viralurl.com
127.0.0.1	viralurl.com
127.0.0.1	www.virbgilio.it
127.0.0.1	virbgilio.it
127.0.0.1	www.virbilio.it
127.0.0.1	virbilio.it
127.0.0.1	www.virdgilio.it
127.0.0.1	virdgilio.it
127.0.0.1	www.viregilio.it
127.0.0.1	viregilio.it
127.0.0.1	www.virfgilio.it
127.0.0.1	virfgilio.it
127.0.0.1	www.virg8ilio.it
127.0.0.1	virg8ilio.it
127.0.0.1	www.virg8lio.it
127.0.0.1	virg8lio.it
127.0.0.1	www.virg9ilio.it
127.0.0.1	virg9ilio.it
127.0.0.1	www.virg9lio.it
127.0.0.1	virg9lio.it
127.0.0.1	www.virgbilio.it
127.0.0.1	virgbilio.it
127.0.0.1	www.virgfilio.it
127.0.0.1	virgfilio.it
127.0.0.1	www.virghilio.it
127.0.0.1	virghilio.it
127.0.0.1	www.virgi8lio.it
127.0.0.1	virgi8lio.it
127.0.0.1	www.virgi9lio.it
127.0.0.1	virgi9lio.it
127.0.0.1	www.virgiilo.it
127.0.0.1	virgiilo.it
127.0.0.1	www.virgiio.it
127.0.0.1	virgiio.it
127.0.0.1	www.virgijlio.it
127.0.0.1	virgijlio.it
127.0.0.1	www.virgiklio.it
127.0.0.1	virgiklio.it
127.0.0.1	www.virgil8io.it
127.0.0.1	virgil8io.it
127.0.0.1	www.virgil9io.it
127.0.0.1	virgil9io.it
127.0.0.1	www.virgili0.it
127.0.0.1	virgili0.it
127.0.0.1	www.virgili8o.it
127.0.0.1	virgili8o.it
127.0.0.1	www.virgili9.it
127.0.0.1	virgili9.it
127.0.0.1	www.virgili9o.it
127.0.0.1	virgili9o.it
127.0.0.1	www.virgilijo.it
127.0.0.1	virgilijo.it
127.0.0.1	www.virgiliko.it
127.0.0.1	virgiliko.it
127.0.0.1	www.virgilil.it
127.0.0.1	virgilil.it
127.0.0.1	www.virgililo.it
127.0.0.1	virgililo.it
127.0.0.1	www.virgilio0.it
127.0.0.1	virgilio0.it
127.0.0.1	www.virgilio9.it
127.0.0.1	virgilio9.it
127.0.0.1	www.virgilioi.it
127.0.0.1	virgilioi.it
127.0.0.1	www.virgiliok.it
127.0.0.1	virgiliok.it
127.0.0.1	www.virgiliol.it
127.0.0.1	virgiliol.it
127.0.0.1	www.virgiliop.it
127.0.0.1	virgiliop.it
127.0.0.1	www.virgilipo.it
127.0.0.1	virgilipo.it
127.0.0.1	www.virgiliuo.it
127.0.0.1	virgiliuo.it
127.0.0.1	www.virgiljio.it
127.0.0.1	virgiljio.it
127.0.0.1	www.virgilkio.it
127.0.0.1	virgilkio.it
127.0.0.1	www.virgiloio.it
127.0.0.1	virgiloio.it
127.0.0.1	www.virgiloo.it
127.0.0.1	virgiloo.it
127.0.0.1	www.virgilpio.it
127.0.0.1	virgilpio.it
127.0.0.1	www.virgiluio.it
127.0.0.1	virgiluio.it
127.0.0.1	www.virgiluo.it
127.0.0.1	virgiluo.it
127.0.0.1	virgin-tgp.net
127.0.0.1	www.virgioio.it
127.0.0.1	virgioio.it
127.0.0.1	www.virgiolio.it
127.0.0.1	virgiolio.it
127.0.0.1	www.virgiplio.it
127.0.0.1	virgiplio.it
127.0.0.1	www.virgiulio.it
127.0.0.1	virgiulio.it
127.0.0.1	www.virgjilio.it
127.0.0.1	virgjilio.it
127.0.0.1	www.virgkilio.it
127.0.0.1	virgkilio.it
127.0.0.1	www.virgklio.it
127.0.0.1	virgklio.it
127.0.0.1	www.virglilio.it
127.0.0.1	virglilio.it
127.0.0.1	www.virgoilio.it
127.0.0.1	virgoilio.it
127.0.0.1	www.virgtilio.it
127.0.0.1	virgtilio.it
127.0.0.1	www.virguilio.it
127.0.0.1	virguilio.it
127.0.0.1	www.virgvilio.it
127.0.0.1	virgvilio.it
127.0.0.1	www.virgyilio.it
127.0.0.1	virgyilio.it
127.0.0.1	www.virhgilio.it
127.0.0.1	virhgilio.it
127.0.0.1	www.virprotect.com
127.0.0.1	virprotect.com
127.0.0.1	www.virtgilio.it
127.0.0.1	virtgilio.it
127.0.0.1	www.virtilio.it
127.0.0.1	virtilio.it
127.0.0.1	virtualcodec.com
127.0.0.1	www.virtualcodec.com
127.0.0.1	virtual-ticket.net
127.0.0.1	www.virtual-ticket.net
127.0.0.1	www.virusburst.com
127.0.0.1	virusburst.com
127.0.0.1	www.viruscrusher.com
127.0.0.1	viruscrusher.com
127.0.0.1	www.virusdifesa.com
127.0.0.1	virusdifesa.com
127.0.0.1	www.virusforsvar.com
127.0.0.1	virusforsvar.com
127.0.0.1	www.virusgarde.com
127.0.0.1	virusgarde.com
127.0.0.1	www.virusheat.com
127.0.0.1	virusheat.com
127.0.0.1	www.virushunter.com
127.0.0.1	virushunter.com
127.0.0.1	www.virusisolator.com
127.0.0.1	virusisolator.com
127.0.0.1	virus-isolator.com
127.0.0.1	www.virus-isolator.com
127.0.0.1	www.viruslabs2009.com
127.0.0.1	viruslabs2009.com
127.0.0.1	www.virusnuke.com
127.0.0.1	virusnuke.com
127.0.0.1	virusprotectpro.com
127.0.0.1	www.virusranger.com
127.0.0.1	virusranger.com
127.0.0.1	www.virusremover2008.com
127.0.0.1	virusremover2008.com
127.0.0.1	www.virusrescue.com
127.0.0.1	virusrescue.com
127.0.0.1	www.virusscansite.com
127.0.0.1	virusscansite.com
127.0.0.1	www.virusschlacht.com
127.0.0.1	virusschlacht.com
127.0.0.1	www.virusvakt.com
127.0.0.1	virusvakt.com
127.0.0.1	www.virvgilio.it
127.0.0.1	virvgilio.it
127.0.0.1	www.virvilio.it
127.0.0.1	virvilio.it
127.0.0.1	www.virygilio.it
127.0.0.1	virygilio.it
127.0.0.1	vitamins-for-each.com
127.0.0.1	www.vitrgilio.it
127.0.0.1	vitrgilio.it
127.0.0.1	www.viurgilio.it
127.0.0.1	viurgilio.it
127.0.0.1	www.viva-codec.com
127.0.0.1	viva-codec.com
127.0.0.1	www.vivacodec.net
127.0.0.1	vivacodec.net
127.0.0.1	www.vjirgilio.it
127.0.0.1	vjirgilio.it
127.0.0.1	www.vkirgilio.it
127.0.0.1	vkirgilio.it
127.0.0.1	www.vkrgilio.it
127.0.0.1	vkrgilio.it
127.0.0.1	www.vlirgilio.it
127.0.0.1	vlirgilio.it
127.0.0.1	www.voghp.com
127.0.0.1	voghp.com
127.0.0.1	void.truth-is-out-there.org
127.0.0.1	www.voirgilio.it
127.0.0.1	voirgilio.it
127.0.0.1	www.vorlagen-archiv.com
127.0.0.1	vorlagen-archiv.com
127.0.0.1	www.vorlagen-datenbank.net
127.0.0.1	vorlagen-datenbank.net
127.0.0.1	www.vorlagen-downloaden.com
127.0.0.1	vorlagen-downloaden.com
127.0.0.1	www.vorlagen-downloads.de
127.0.0.1	vorlagen-downloads.de
127.0.0.1	www.vorlagen-land.de
127.0.0.1	vorlagen-land.de
127.0.0.1	vorlagenonline.com
127.0.0.1	www.vorlagenonline.com
127.0.0.1	www.vorlagen-paradies.de
127.0.0.1	vorlagen-paradies.de
127.0.0.1	www.vorlagen-world.de
127.0.0.1	vorlagen-world.de
127.0.0.1	www.vornamen-heute.com
127.0.0.1	vornamen-heute.com
127.0.0.1	www.vornamen-suchen.de
127.0.0.1	vornamen-suchen.de
127.0.0.1	www.vorriere.it
127.0.0.1	vorriere.it
127.0.0.1	votehowe.org
127.0.0.1	www.vother.info
127.0.0.1	vother.info
127.0.0.1	www.votreenton.biz
127.0.0.1	votreenton.biz
127.0.0.1	vparivalka.com
127.0.0.1	www.vpcompressor.com
127.0.0.1	vpcompressor.com
127.0.0.1	www.vplprocedure.com
127.0.0.1	vplprocedure.com
127.0.0.1	vse-moe.biz
127.0.0.1	www.vskeylogger.nazwa.pl
127.0.0.1	vskeylogger.nazwa.pl
127.0.0.1	www.vtbmovie.com
127.0.0.1	vtbmovie.com
127.0.0.1	www.vtvcp-ueorn.com
127.0.0.1	vtvcp-ueorn.com
127.0.0.1	www.vtvcp-ymct.com
127.0.0.1	vtvcp-ymct.com
127.0.0.1	www.vuirgilio.it
127.0.0.1	vuirgilio.it
127.0.0.1	www.vvvvw-spybot.com.cn
127.0.0.1	vvvvw-spybot.com.cn
127.0.0.1	www.vvwvv-spybot.com.cn
127.0.0.1	vvwvv-spybot.com.cn
127.0.0.1	vxebony.com
127.0.0.1	wabq.com
127.0.0.1	wabu.com
127.0.0.1	wakeupdick.com
127.0.0.1	www.walitalia.it
127.0.0.1	walitalia.it
127.0.0.1	www.wanfuchina.com
127.0.0.1	wanfuchina.com
127.0.0.1	www.wann-wirst-du-sterben.com
127.0.0.1	wann-wirst-du-sterben.com
127.0.0.1	www.ware2006.com
127.0.0.1	ware2006.com
127.0.0.1	www.warez.com
127.0.0.1	warez.com
127.0.0.1	www.warningiepage.com
127.0.0.1	warningiepage.com
127.0.0.1	warnomore.org
127.0.0.1	www.warumsingle.com
127.0.0.1	warumsingle.com
127.0.0.1	www.watchonline.tv
127.0.0.1	watchonline.tv
127.0.0.1	watersport-specialties.com
127.0.0.1	www.wav2008.com
127.0.0.1	wav2008.com
127.0.0.1	www.wazzupnet.com
127.0.0.1	wazzupnet.com
127.0.0.1	www.wbay.it
127.0.0.1	wbay.it
127.0.0.1	wbkb.com
127.0.0.1	web.links4all.biz
127.0.0.1	web1000.com
127.0.0.1	webaccelerating.com
127.0.0.1	www.webaccelerating.com
127.0.0.1	www.webbestlink.com
127.0.0.1	webbestlink.com
127.0.0.1	www.webbuying.net
127.0.0.1	webbuying.net
127.0.0.1	www.web-codec.com
127.0.0.1	web-codec.com
127.0.0.1	webcoolsearch.com
127.0.0.1	web-entrance.co
127.0.0.1	www.web-fastserve.com
127.0.0.1	web-fastserve.com
127.0.0.1	www.webhancer.com
127.0.0.1	webhancer.com
127.0.0.1	web-homepage.net
127.0.0.1	www.webinvestigator.com
127.0.0.1	webinvestigator.com
127.0.0.1	webiphoneaccess.com
127.0.0.1	www.webiphoneaccess.com
127.0.0.1	www.webiphonedownloads.com
127.0.0.1	webiphonedownloads.com
127.0.0.1	webipoddownload.com
127.0.0.1	www.webipoddownload.com
127.0.0.1	webloyalty.com
127.0.0.1	www.webloyalty.com
127.0.0.1	web-mediaplayer.com
127.0.0.1	www.web-mediaplayer.com
127.0.0.1	www.webnetinfo.net
127.0.0.1	webnetinfo.net
127.0.0.1	web-nexus.net
127.0.0.1	www.webpspdownload.com
127.0.0.1	webpspdownload.com
127.0.0.1	www.webrichplaying.net
127.0.0.1	webrichplaying.net
127.0.0.1	www.webscweb-scannerfree.com
127.0.0.1	webscweb-scannerfree.com
127.0.0.1	www.websearch.com
127.0.0.1	websearch.com
127.0.0.1	web-search.tk
127.0.0.1	www.websearch24.com
127.0.0.1	websearch24.com
127.0.0.1	websearchdot.com
127.0.0.1	www.websecurebar.com
127.0.0.1	websecurebar.com
127.0.0.1	www.websmsdienst.de
127.0.0.1	websmsdienst.de
127.0.0.1	www.websoft-a.com
127.0.0.1	websoft-a.com
127.0.0.1	www.websoftcodecdriver.com
127.0.0.1	websoftcodecdriver.com
127.0.0.1	www.websoftcodecdriver2.com
127.0.0.1	websoftcodecdriver2.com
127.0.0.1	www.websopot.com
127.0.0.1	websopot.com
127.0.0.1	www.webspyshield.com
127.0.0.1	webspyshield.com
127.0.0.1	www.webtop100.net
127.0.0.1	webtop100.net
127.0.0.1	www.webtopsecurity.com
127.0.0.1	webtopsecurity.com
127.0.0.1	www.webtunr.com
127.0.0.1	webtunr.com
127.0.0.1	weekend-movies.com
127.0.0.1	www.weeproject.com
127.0.0.1	weeproject.com
127.0.0.1	www.wegvonviren.com
127.0.0.1	wegvonviren.com
127.0.0.1	www.wer-bumst-mich.de
127.0.0.1	wer-bumst-mich.de
127.0.0.1	www.wethere.com
127.0.0.1	wethere.com
127.0.0.1	wetpornostars.com
127.0.0.1	www.wetsoftwares.com
127.0.0.1	wetsoftwares.com
127.0.0.1	wfix.com
127.0.0.1	wflu.com
127.0.0.1	www.wg581.com
127.0.0.1	wg581.com
127.0.0.1	www.whatawonderfullvideo.com
127.0.0.1	whatawonderfullvideo.com
127.0.0.1	www.whatmetodonow.org
127.0.0.1	whatmetodonow.org
127.0.0.1	whatsyoursearch.com
127.0.0.1	whazit.com
127.0.0.1	www.whitecodec.com
127.0.0.1	whitecodec.com
127.0.0.1	white-pages.ws
127.0.0.1	www.whitescat.com
127.0.0.1	whitescat.com
127.0.0.1	whittierblvd.com
127.0.0.1	www.whoisprivacyprotect.com
127.0.0.1	whoisprivacyprotect.com
127.0.0.1	www.wie-anziehend-bist-du.de
127.0.0.1	wie-anziehend-bist-du.de
127.0.0.1	www.wie-schlau-bin-ich.com
127.0.0.1	wie-schlau-bin-ich.com
127.0.0.1	www.wie-schlau-bist-du.com
127.0.0.1	wie-schlau-bist-du.com
127.0.0.1	www.wie-schlau-bist-du.de
127.0.0.1	wie-schlau-bist-du.de
127.0.0.1	www.wie-schlau-bist-du24.com
127.0.0.1	wie-schlau-bist-du24.com
127.0.0.1	www.willst-du-mein-freund-sein.com
127.0.0.1	willst-du-mein-freund-sein.com
127.0.0.1	winamp2007.com
127.0.0.1	www.winamp2007.com
127.0.0.1	winamp-download-now.com
127.0.0.1	www.winamp-download-now.com
127.0.0.1	winamp-hq.com
127.0.0.1	www.winamp-hq.com
127.0.0.1	www.winantispam.com
127.0.0.1	winantispam.com
127.0.0.1	www.winantispy.com
127.0.0.1	winantispy.com
127.0.0.1	winantispyware.com
127.0.0.1	www.winantispyware.com
127.0.0.1	winantivirus.com
127.0.0.1	www.winantivirus.com
127.0.0.1	www.winantiviruspro.com
127.0.0.1	winantiviruspro.com
127.0.0.1	www.win-anti-virus-pro.com
127.0.0.1	win-anti-virus-pro.com
127.0.0.1	windefender.com
127.0.0.1	www.windefender.com
127.0.0.1	www.win-defender.com
127.0.0.1	win-defender.com
127.0.0.1	windowenhancer.com
127.0.0.1	windows-scanner.com
127.0.0.1	www.windows-scanner.com
127.0.0.1	www.windows-scanner2009.com
127.0.0.1	windows-scanner2009.com
127.0.0.1	windrivecleaner.com
127.0.0.1	www.windrivecleaner.com
127.0.0.1	www.windrivesafe.com
127.0.0.1	windrivesafe.com
127.0.0.1	windupdates.com
127.0.0.1	winfirewall.com
127.0.0.1	www.winfirewall.com
127.0.0.1	winfixer.com
127.0.0.1	www.winfixer.com
127.0.0.1	www.winfixer2006.com
127.0.0.1	winfixer2006.com
127.0.0.1	win-in-casino.com
127.0.0.1	www.winmediacodec.com
127.0.0.1	winmediacodec.com
127.0.0.1	winmsn.com
127.0.0.1	www.winmx.click-new-download.com
127.0.0.1	winmx.click-new-download.com
127.0.0.1	www.winmxfrance.com
127.0.0.1	winmxfrance.com
127.0.0.1	www.winmx-freebie.com
127.0.0.1	winmx-freebie.com
127.0.0.1	www.winmx-music-download.com
127.0.0.1	winmx-music-download.com
127.0.0.1	www.winnanny.com
127.0.0.1	winnanny.com
127.0.0.1	winprotect.net
127.0.0.1	www.winrar-download-now.com
127.0.0.1	winrar-download-now.com
127.0.0.1	www.winrar-hq.com
127.0.0.1	winrar-hq.com
127.0.0.1	www.winrar-stop.com
127.0.0.1	winrar-stop.com
127.0.0.1	www.winreanimator.com
127.0.0.1	winreanimator.com
127.0.0.1	www.winsecureav.com
127.0.0.1	winsecureav.com
127.0.0.1	winshow.biz
127.0.0.1	www.winsoftware.com
127.0.0.1	winsoftware.com
127.0.0.1	www.winspycontrol.com
127.0.0.1	winspycontrol.com
127.0.0.1	www.winspykiller.com
127.0.0.1	winspykiller.com
127.0.0.1	www.winspywareprotects.com
127.0.0.1	winspywareprotects.com
127.0.0.1	www.wintvguide.com
127.0.0.1	wintvguide.com
127.0.0.1	win-virus-pro.com
127.0.0.1	www.win-virus-pro.com
127.0.0.1	www.winxpspeedup.com
127.0.0.1	winxpspeedup.com
127.0.0.1	www.winzip-11.com
127.0.0.1	winzip-11.com
127.0.0.1	www.winzip-hq.com
127.0.0.1	winzip-hq.com
127.0.0.1	www.winzix.com
127.0.0.1	winzix.com
127.0.0.1	wiresearch.com
127.0.0.1	wish7.com
127.0.0.1	witze2008.de
127.0.0.1	www.witze2008.de
127.0.0.1	witze-heute.com
127.0.0.1	www.witze-heute.com
127.0.0.1	www.wm.buhartes.info
127.0.0.1	wm.buhartes.info
127.0.0.1	www.wm.kannylizaciya.info
127.0.0.1	wm.kannylizaciya.info
127.0.0.1	www.wm.komforochka.info
127.0.0.1	wm.komforochka.info
127.0.0.1	www.wm.vother.info
127.0.0.1	wm.vother.info
127.0.0.1	www.wmaassistant.com
127.0.0.1	wmaassistant.com
127.0.0.1	www.wmadirection.com
127.0.0.1	wmadirection.com
127.0.0.1	www.wmpltools.com
127.0.0.1	wmpltools.com
127.0.0.1	www.wmvappliance.com
127.0.0.1	wmvappliance.com
127.0.0.1	www.wmvassistant.com
127.0.0.1	wmvassistant.com
127.0.0.1	www.wmvcompressor.com
127.0.0.1	wmvcompressor.com
127.0.0.1	www.wmvsolution.com
127.0.0.1	wmvsolution.com
127.0.0.1	www.wmvtool.com
127.0.0.1	wmvtool.com
127.0.0.1	www.woai117.cn
127.0.0.1	woai117.cn
127.0.0.1	www.wohnung-heute.com
127.0.0.1	wohnung-heute.com
127.0.0.1	wolfpacracing.com
127.0.0.1	www.wonder-context.com
127.0.0.1	wonder-context.com
127.0.0.1	woool.100888290cs.com
127.0.0.1	wordlist.jps.ru
127.0.0.1	www.worldantispy.com
127.0.0.1	worldantispy.com
127.0.0.1	www.worldbestadult.com
127.0.0.1	worldbestadult.com
127.0.0.1	www.worldray.com
127.0.0.1	worldray.com
127.0.0.1	www.worldsecurityonline.biz
127.0.0.1	worldsecurityonline.biz
127.0.0.1	world-sex.urllogs.com
127.0.0.1	www.worldtostart.com
127.0.0.1	worldtostart.com
127.0.0.1	worldusa.com
127.0.0.1	www.worldwideadvertisingservices.info
127.0.0.1	worldwideadvertisingservices.info
127.0.0.1	www.wotcodec.com
127.0.0.1	wotcodec.com
127.0.0.1	www.wovview.com
127.0.0.1	wovview.com
127.0.0.1	www.wowsearch.org
127.0.0.1	wowsearch.org
127.0.0.1	wpc2001.org
127.0.0.1	wr.mcboo.com
127.0.0.1	wrs.mcboo.com
127.0.0.1	wrsnav.wwlax.com
127.0.0.1	www.wsp2008scanner.com
127.0.0.1	wsp2008scanner.com
127.0.0.1	wspzone.sexpornonline.com
127.0.0.1	www.wsupereva.it
127.0.0.1	wsupereva.it
127.0.0.1	www.wudiliuliang.com
127.0.0.1	wudiliuliang.com
127.0.0.1	www.wurstmuetze.de
127.0.0.1	wurstmuetze.de
127.0.0.1	www.wwlax.com
127.0.0.1	wwlax.com
127.0.0.1	www.www.pcantispyware.com
127.0.0.1	www1.beruijindegunhadesun.com
127.0.0.1	www.www2.p0rt2.com
127.0.0.1	www2.p0rt2.com
127.0.0.1	www224.paypopup.com
127.0.0.1	www3.bigtrafficnetwork.com
127.0.0.1	www3.hadesunharuikeya.com
127.0.0.1	www4free.info
127.0.0.1	www5.worldray.com
127.0.0.1	www6.worldray.com
127.0.0.1	www.www7.logih.com
127.0.0.1	www7.logih.com
127.0.0.1	wwwadobe-download-now.com
127.0.0.1	www-audacity.com
127.0.0.1	www.www-audacity.com
127.0.0.1	wwwbet.net
127.0.0.1	wwwbetting.net
127.0.0.1	wwwcrazygirls-world.com
127.0.0.1	www-download-antivirus.com
127.0.0.1	www.www-download-antivirus.com
127.0.0.1	wwwdownloadwizard.com
127.0.0.1	www.www-free-tunes.com
127.0.0.1	www-free-tunes.com
127.0.0.1	wwwpokergames.com
127.0.0.1	wwwpokerplayers.com
127.0.0.1	wwwroulette.net
127.0.0.1	www.wwwsearch.biz
127.0.0.1	wwwsearch.biz
127.0.0.1	www.www-spyboot.com
127.0.0.1	www-spyboot.com
127.0.0.1	www-spybot.net
127.0.0.1	www.www-spybot.net
127.0.0.1	www.www-spybotcom.com
127.0.0.1	www-spybotcom.com
127.0.0.1	www-spybot-info.com
127.0.0.1	www.www-spybot-info.com
127.0.0.1	www-spywarebot.org
127.0.0.1	www.www-spywarebot.org
127.0.0.1	wwww.2211.net
127.0.0.1	wwww.adnet-plus.com
127.0.0.1	www-win-mx.com
127.0.0.1	www.www-win-mx.com
127.0.0.1	wwwxtremesoftware-ltd.com
127.0.0.1	wwwyahoo.downloadznow.net
127.0.0.1	www.wxterriy.info
127.0.0.1	wxterriy.info
127.0.0.1	www.wzdq.cn
127.0.0.1	wzdq.cn
127.0.0.1	x.full-tgp.net
127.0.0.1	xads.cliks.org
127.0.0.1	www.xathzesocc.com
127.0.0.1	xathzesocc.com
127.0.0.1	xbeta69.com
127.0.0.1	www.xbxxrvnyes.com
127.0.0.1	xbxxrvnyes.com
127.0.0.1	xcomics4u.com
127.0.0.1	www.xcorriere.it
127.0.0.1	xcorriere.it
127.0.0.1	www.xerocodec.com
127.0.0.1	xerocodec.com
127.0.0.1	xerocodec.net
127.0.0.1	www.xerocodec.net
127.0.0.1	x-google.net
127.0.0.1	xhcodec.com
127.0.0.1	www.xhcodec.com
127.0.0.1	xh-codec.net
127.0.0.1	www.xh-codec.net
127.0.0.1	xibu315.com
127.0.0.1	www.xibu315.com
127.0.0.1	xic-bs.com
127.0.0.1	xjupiter.com
127.0.0.1	www.xjupiter.com
127.0.0.1	www.xlarea.com
127.0.0.1	xlarea.com
127.0.0.1	xldd.com
127.0.0.1	www.xldd.com
127.0.0.1	xldr.com
127.0.0.1	x-library.com
127.0.0.1	xlola.underagehost.com
127.0.0.1	xmlsearch.mygeek.com
127.0.0.1	xmlwindataweb.net
127.0.0.1	www.xmlwindataweb.net
127.0.0.1	xorriere.it
127.0.0.1	www.xorriere.it
127.0.0.1	www.xosearchox.com
127.0.0.1	xosearchox.com
127.0.0.1	xp.attrezzi.biz
127.0.0.1	xp18.com
127.0.0.1	www.xpantiviruspro.com
127.0.0.1	xpantiviruspro.com
127.0.0.1	xpas2009.com
127.0.0.1	www.xpas2009.com
127.0.0.1	www.xpas-2009.com
127.0.0.1	xpas-2009.com
127.0.0.1	xpassgenerator.com
127.0.0.1	www.xpassgenerator.com
127.0.0.1	xpasswordmanager.com
127.0.0.1	www.xpasswordmanager.com
127.0.0.1	www.xponlinescanner.com
127.0.0.1	xponlinescanner.com
127.0.0.1	x-porngalleries.com
127.0.0.1	www.x-porngalleries.com
127.0.0.1	x-pornmoviez.com
127.0.0.1	www.x-pornmoviez.com
127.0.0.1	x-pornmovz.com
127.0.0.1	www.x-pornmovz.com
127.0.0.1	www.xp-protect-2008.com
127.0.0.1	xp-protect-2008.com
127.0.0.1	xprmn4u.info
127.0.0.1	www.xprmn4u.info
127.0.0.1	x-prnmoviez.com
127.0.0.1	www.x-prnmoviez.com
127.0.0.1	xpsecuritycenter.com
127.0.0.1	www.xpsecuritycenter.com
127.0.0.1	www.xp-shield.com
127.0.0.1	xp-shield.com
127.0.0.1	xp-vista.com
127.0.0.1	www.xp-vista.com
127.0.0.1	xp-vista-update.net
127.0.0.1	www.xp-vista-update.net
127.0.0.1	www.x-ratedclips.com
127.0.0.1	x-ratedclips.com
127.0.0.1	www.xrdenterprise.com
127.0.0.1	xrdenterprise.com
127.0.0.1	xrenoder.com
127.0.0.1	www.xrenoder.com
127.0.0.1	xrenosearch.com
127.0.0.1	xrensmagpost.com
127.0.0.1	xsec.org
127.0.0.1	www.xsec.org
127.0.0.1	xsex.ws
127.0.0.1	xsremover.com
127.0.0.1	www.xsremover.com
127.0.0.1	xtipp.de
127.0.0.1	www.xtipp.de
127.0.0.1	www.xtosearch.biz
127.0.0.1	xtosearch.biz
127.0.0.1	xtragay.com
127.0.0.1	xtravideos.com
127.0.0.1	www.xtravideos.com
127.0.0.1	xtremesoftware-ltd.com
127.0.0.1	xu.pl
127.0.0.1	xu.xu.pl
127.0.0.1	xul93.pubdomainstr.com
127.0.0.1	xupiter.com
127.0.0.1	www.xupiter.com
127.0.0.1	www.xvgate.com
127.0.0.1	xvgate.com
127.0.0.1	xvidscollection.com
127.0.0.1	www.xvidscollection.com
127.0.0.1	xvsenterprise.com
127.0.0.1	www.xvsenterprise.com
127.0.0.1	x-webdesign.com
127.0.0.1	www.x-webdesign.com
127.0.0.1	www.xwebsearch.biz
127.0.0.1	xwebsearch.biz
127.0.0.1	xx.ka3ek.com
127.0.0.1	xx.sqlteam.info
127.0.0.1	www.xxlblog.info
127.0.0.1	xxlblog.info
127.0.0.1	xxx.com
127.0.0.1	www.xxx.com
127.0.0.1	www.xxxallvideo.com
127.0.0.1	xxxallvideo.com
127.0.0.1	xxxcategories.com
127.0.0.1	xxxemailxxx.com
127.0.0.1	www.xxxmovietour.com
127.0.0.1	xxxmovietour.com
127.0.0.1	xxxpornmovs.com
127.0.0.1	www.xxxpornmovs.com
127.0.0.1	xxxteenfilm.com
127.0.0.1	www.xxxteenfilm.com
127.0.0.1	xxx-testen.de
127.0.0.1	www.xxx-testen.de
127.0.0.1	xxxtoolbar.com
127.0.0.1	www.xxxzonevideo.com
127.0.0.1	xxxzonevideo.com
127.0.0.1	xyk.txshi.com
127.0.0.1	www.xyzlimited.com
127.0.0.1	xyzlimited.com
127.0.0.1	www.xyzsolution.com
127.0.0.1	xyzsolution.com
127.0.0.1	www.xyztogo.com
127.0.0.1	xyztogo.com
127.0.0.1	xzoomy.com
127.0.0.1	www.yahabags.com
127.0.0.1	yahabags.com
127.0.0.1	yahoo.downloadznow.net
127.0.0.1	yahoo.panet.org
127.0.0.1	www.yboeragu.com
127.0.0.1	yboeragu.com
127.0.0.1	www.ydaproject.com
127.0.0.1	ydaproject.com
127.0.0.1	yeak.net
127.0.0.1	y-e-l-l-o-w.com
127.0.0.1	yellow500.com
127.0.0.1	yezol.com
127.0.0.1	www.ygcoueorn.com
127.0.0.1	ygcoueorn.com
127.0.0.1	www.ygcovtvcp.com
127.0.0.1	ygcovtvcp.com
127.0.0.1	www.ygoogle.it
127.0.0.1	ygoogle.it
127.0.0.1	www.ygsondheks.info
127.0.0.1	ygsondheks.info
127.0.0.1	www.yim-stop.com
127.0.0.1	yim-stop.com
127.0.0.1	www.yiscali.it
127.0.0.1	yiscali.it
127.0.0.1	ymctaaqada.com
127.0.0.1	www.ymctaaqada.com
127.0.0.1	ymct-aaqada.com
127.0.0.1	www.ymct-aaqada.com
127.0.0.1	www.ymctavxiz.biz
127.0.0.1	ymctavxiz.biz
127.0.0.1	www.ynotube.com
127.0.0.1	ynotube.com
127.0.0.1	www.yoogee.com
127.0.0.1	yoogee.com
127.0.0.1	www.yoogle.it
127.0.0.1	yoogle.it
127.0.0.1	yootube.info
127.0.0.1	www.yops.biz
127.0.0.1	yops.biz
127.0.0.1	youfindall.com
127.0.0.1	youfindall.net
127.0.0.1	www.youlikehere.com
127.0.0.1	youlikehere.com
127.0.0.1	www.youniyouwo.com
127.0.0.1	youniyouwo.com
127.0.0.1	yourbookmarks.info
127.0.0.1	yourbookmarks.ws
127.0.0.1	www.yourchillyvids.com
127.0.0.1	yourchillyvids.com
127.0.0.1	yourcodec.com
127.0.0.1	www.yourcodec.com
127.0.0.1	www.yourenhancement.com
127.0.0.1	yourenhancement.com
127.0.0.1	yourieprotect.com
127.0.0.1	www.yourieprotect.com
127.0.0.1	www.youriesafety.com
127.0.0.1	youriesafety.com
127.0.0.1	www.youriesecure.com
127.0.0.1	youriesecure.com
127.0.0.1	www.yourphotozone.com
127.0.0.1	yourphotozone.com
127.0.0.1	your-prescriptions.net
127.0.0.1	yoursearchspace.com
127.0.0.1	www.yoursearchspace.com
127.0.0.1	yoursitebar.com
127.0.0.1	www.your-windows-scanner.com
127.0.0.1	your-windows-scanner.com
127.0.0.1	you-search.com
127.0.0.1	you-search.com.ru
127.0.0.1	ypir.com
127.0.0.1	ysa-info.net
127.0.0.1	www.ysbweb.com
127.0.0.1	ysbweb.com
127.0.0.1	www.ytiscali.it
127.0.0.1	ytiscali.it
127.0.0.1	www.ytrenitalia.it
127.0.0.1	ytrenitalia.it
127.0.0.1	yukohamano.com
127.0.0.1	www.yunibo.it
127.0.0.1	yunibo.it
127.0.0.1	yurigamboa25.googlepages.com
127.0.0.1	ywebsearch.info
127.0.0.1	zabywjwzlr.biz.biz
127.0.0.1	www.zabywjwzlr.biz.biz
127.0.0.1	www.zalitalia.it
127.0.0.1	zalitalia.it
127.0.0.1	zangcodec.net
127.0.0.1	www.zangcodec.net
127.0.0.1	zangocash.com
127.0.0.1	www.zangocash.com
127.0.0.1	zapros.com
127.0.0.1	zcodec.com
127.0.0.1	www.zcodec.com
127.0.0.1	zdrqmpad.com
127.0.0.1	www.zdrqmpad.com
127.0.0.1	www.zelaznyworld.com
127.0.0.1	zelaznyworld.com
127.0.0.1	zenotecnico.com
127.0.0.1	www.zenotecnico.com
127.0.0.1	zenotecnico2.com
127.0.0.1	www.zenotecnico2.com
127.0.0.1	zero.bestmanage.org
127.0.0.1	zero.bestmanage0.org
127.0.0.1	zero.bestmanage1.org
127.0.0.1	zero.bestmanage2.org
127.0.0.1	zero.bestmanage3.org
127.0.0.1	zero.bestmanage4.org
127.0.0.1	zero.bestmanage5.org
127.0.0.1	zero.bestmanage6.org
127.0.0.1	zero.bestmanage7.org
127.0.0.1	zero.bestmanage8.org
127.0.0.1	zero.bestmanage9.org
127.0.0.1	zero.serverc.org
127.0.0.1	zero.sisdotnet.com
127.0.0.1	zerocodec.com
127.0.0.1	www.zerocodec.com
127.0.0.1	zero-codec.com
127.0.0.1	www.zero-codec.com
127.0.0.1	zesearch.com
127.0.0.1	zestyfind.com
127.0.0.1	www.zestyfind.com
127.0.0.1	zfxaqzkevi.com
127.0.0.1	www.zfxaqzkevi.com
127.0.0.1	www.zhmbscwdgk.biz
127.0.0.1	zhmbscwdgk.biz
127.0.0.1	zinblog.com
127.0.0.1	www.zinblog.com
127.0.0.1	zipcodec.com
127.0.0.1	www.zipcodec.com
127.0.0.1	ziportal.com
127.0.0.1	zipportal.com
127.0.0.1	www.zippy-lookup.com
127.0.0.1	zippy-lookup.com
127.0.0.1	zjkjw.gov.cn
127.0.0.1	www.zjkjw.gov.cn
127.0.0.1	www.znext.com
127.0.0.1	znext.com
127.0.0.1	www.zonealarm-download-now.com
127.0.0.1	zonealarm-download-now.com
127.0.0.1	zonealarm-stop.com
127.0.0.1	www.zonealarm-stop.com
127.0.0.1	zone-media.com
127.0.0.1	www.zone-media.com
127.0.0.1	zoneoffreeporn.com
127.0.0.1	zoofil.com
127.0.0.1	zoomegasite.com
127.0.0.1	www.zpwebsource.com
127.0.0.1	zpwebsource.com
127.0.0.1	zqavanjpn.biz
127.0.0.1	www.zqavanjpn.biz
127.0.0.1	z-quest.com
127.0.0.1	www.z-quest.com
127.0.0.1	www.zsupereva.it
127.0.0.1	zsupereva.it
127.0.0.1	www.zsvcompany.com
127.0.0.1	zsvcompany.com
127.0.0.1	www.zuoyouweinan.com
127.0.0.1	zuoyouweinan.com
127.0.0.1	www.zurrusco.com
127.0.0.1	zurrusco.com
127.0.0.1	zvimigdal.com
127.0.0.1	www.zxcsolution.com
127.0.0.1	zxcsolution.com
127.0.0.1	www.zxlinks.com
127.0.0.1	zxlinks.com
127.0.0.1	zyban-zocor-levitra.com

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés


»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» RK


»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{EDBC1EE6-C19B-4FEA-AED3-C1F084F62C09}: DhcpNameServer=195.7.111.1 195.7.112.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{EDBC1EE6-C19B-4FEA-AED3-C1F084F62C09}: DhcpNameServer=195.7.111.1 195.7.112.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{C7459B1D-E122-4C73-BF86-DFE87EC15995}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{EDBC1EE6-C19B-4FEA-AED3-C1F084F62C09}: DhcpNameServer=195.7.111.1 195.7.112.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
 
Nettoyage terminé. 
 
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

alexsofa · Answer

Et le HijackThis : 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:33:54, on 28/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\vmnat.exe
C:\Program Files\UltraVNC\WinVNC.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
C:\WINDOWS\system32\vmnetdhcp.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\OEM02Mon.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\VMware\VMware Workstation\vmware-tray.exe
C:\WINDOWS\system32	askswitch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Alex\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Documents and Settings\Alex\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.vmware.com/info?id=324
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll (file missing)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Loader Class - {F880A4A8-C436-4AC4-AFD1-AA0BDC9552DD} - C:\WINDOWS\BricoPacks\LeopardXP\FindeXer.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start
O4 - HKLM\..\Run: [OEM02Mon.exe] C:\WINDOWS\OEM02Mon.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [vmware-tray] C:\Program Files\VMware\VMware Workstation\vmware-tray.exe
O4 - HKLM\..\Run: [WinVNC] "C:\Program Files\UltraVNC\WinVNC.exe" -servicehelper
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32	askswitch.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SpywareCleaner] C:\WINDOWS\system32\SpywareRemover.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Alex\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-ufad.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe
O23 - Service: VNC Server (winvnc) - UltraVNC - C:\Program Files\UltraVNC\WinVNC.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

alexsofa · Answer

Wahab' c'est de l'hallu les hosts.... j'ai coupé au milieu y'en avait trop...

alexsofa · Answer

d'ailleurs c'est quoi tous ces hosts? des redirections ?

^^Marie^^ · Answer

Télécharge HostsXpert sur ton Bureau : 
http://www.funkytoad.com/download/HostsXpert.zip 

---> Décompresse-le (Clic droit >> Extraire ici) 

---> Double-clique sur HostsXpert pour le lancer 

---> clique sur le bouton "Restore MS Hosts File" puis ferme le programme 

PS : Avant de cliquer sur le bouton "Restore MS Hosts File"
, vérifie que le cadenas en haut à gauche est ouvert sinon tu vas avoir un message d'erreur.


Tu refais un smitfraus en MSE option 2

+ un log Hijackthis

++

alexsofa · Answer

Ok, alors heuh, je poste les rapports, mais je les poste depuis un autre PC parceque depuis ça, le mien ne peut plus se connecter à internet, parceque les connections (sans fil ET ethernet) ne se laissent pas attribuer d'adresse IP....


SmitFraudFix v2.378

Rapport fait à 21:58:00,53, 28/11/2008
Executé à partir de C:\Documents and Settings\Alex\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
a
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés


»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» RK


»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{EDBC1EE6-C19B-4FEA-AED3-C1F084F62C09}: DhcpNameServer=195.7.111.1 195.7.112.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{EDBC1EE6-C19B-4FEA-AED3-C1F084F62C09}: DhcpNameServer=195.7.111.1 195.7.112.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{EDBC1EE6-C19B-4FEA-AED3-C1F084F62C09}: DhcpNameServer=195.7.111.1 195.7.112.1


»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
 
Nettoyage terminé. 
 
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

alexsofa · Answer

Et le Hijack This, en mode normal :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:06:11, on 28/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\OEM02Mon.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\VMware\VMware Workstation\vmware-tray.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32	askswitch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Alex\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\vmnat.exe
C:\Program Files\UltraVNC\WinVNC.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\vmnetdhcp.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.vmware.com/info?id=324
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll (file missing)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start
O4 - HKLM\..\Run: [OEM02Mon.exe] C:\WINDOWS\OEM02Mon.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [vmware-tray] C:\Program Files\VMware\VMware Workstation\vmware-tray.exe
O4 - HKLM\..\Run: [WinVNC] "C:\Program Files\UltraVNC\WinVNC.exe" -servicehelper
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32	askswitch.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SpywareCleaner] C:\WINDOWS\system32\SpywareRemover.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Alex\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-ufad.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe
O23 - Service: VNC Server (winvnc) - UltraVNC - C:\Program Files\UltraVNC\WinVNC.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

alexsofa · Answer

gnouf, ok, la connection, c'est réparé....winsockxpfix.exe....

alexsofa · Answer

Bonjour bonjour,

euh.... c'est fini ?

^^Marie^^ · Answer

Slt

Comment es-tu connecte ?

alexsofa · Answer

Bonsoir!

Toutes les connections fonctionnent, j'ai testé, mais là je suis en sans fil pour le coup.

titicep · Answer

J'ai eu le même problème que toi et on m'a donné un lien pour télécharger un antivirus, il a fait merveille et c'est simple d'utilisation
https://download.cnet.com/malwarebytes-anti-malware/windows.html?part=dl-10804572&subj=dl&tag=button
J'espère que cela aidera quelqu'un qui comme moi cherchait une réponse et qui n'y comprend pas grand chose
Bon courage à tous

alexsofa · Answer

Salut !
C'est vrai que ce n'est pas un antivirus, et c'est vrai aussi que ca résoud pas mal une partie de mon problème ;)

On en est ou ? je suis sauvé moi ?

^^Marie^^ · Answer

Re


Fais tout ce qui suit dans l' ordre ... 

(si ce n’ est déjà fait) Télécharge et installe CCleaner : 
https://forums.cnetfrance.fr 
Sur le site, clique sur > Download latest version et laisse-toi guider. 
Ne coche pas "Ajouter la barre d' outils Yahoo". 
Laisse-le s’ installer tel que … 

Télécharge OTMoveIt (de Old_Timer) sur ton bureau... 
http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe 
http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe

Redémarre le PC en mode sans échec : 
http://forum.telecharger.01net.com/forum/ 
(méthode F8 de préférence) 
http://www.coupdepoucepc.com/modules/news/article.php?storyid=253 
 https://www.micro-astuce.com/depannage/demarrer-mode-sans-echec.php

-------------------------------------------- 
Tu n' auras pas accès à Internet pendant le "mode sans échec". 
Aussi, copie/colle la procédure dans un fichier texte (word) et mets-la sur le 
"bureau" pour l' avoir à ta disposition. 
-------------------------------------------- 

Ferme toutes les fenêtres et applications. 
Relance HijackThis et clique sur > Do a system scan only puis, coche les 
cases devant les lignes qui suivent (et uniquement ces lignes), si tjrs présentes  

 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.vmware.com/info?id=324
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (file missing)
O4 - HKLM\..\Run: [SpywareCleaner] C:\WINDOWS\system32\SpywareRemover.exe


Puis, clique sur > Fix checked 
et valide par « Yes ». Referme HijackThis. 

Double-clique sur OTMoveIt.exe pour le lancer. 
Assure toi que la case "Unregister Dll's and Ocx's" soit bien cochée !!! 
Copie le texte qui se trouve dans l'encadré ci-dessous et colle-le dans le cadre 
de gauche de OTMoveIt nommé Paste List of Files/Folders to be moved. 

C:\WINDOWS\system32\SpywareRemover.exe


Clique sur MoveIt! pour lancer la suppression. 
Lorsque un résultat apparaît dans le cadre Results, clique sur Exit. 
Redémarre ton PC. 
Copie-colle le rapport dans ta réponse : 
Il est situé sur --> C:\_OTMoveIt\MovedFiles. 

Lance CCleaner ... 
Clique sur > Analyse > Lancer le nettoyage, puis sur OK dans la fenêtre qui s' affiche. 
(re)Lance le nettoyage et (re)confirme par OK.
Vide ta corbeille

++

Warning Security report ....

37 réponses

Discussions similaires

Newsletters